Over the years, the Windows operating system has become much better at detecting malware and viruses. With the Microsoft Defender tool now a key aspect of Windows, hackers have chosen to become more creative in order to infect computer systems all around the world.
Windows Calculator is being used in Phishing attacks
Hackers are now using the Windows 7 Calculator application as a tool to infect PCs. The attack begins by tricking users to download an ISO file that is masquerading as a PDF or other type of file. Now, this ISO disc image contains within it a shortcut that launches a copy of the Windows 7 Calculator app.
Cybercriminals choose to use the Windows 7 Calculation application because it will tend to use Dynamic Link Libraries (DLLs) in the same folder if they are available. Now, because the Calculator app is signed by Microsoft, opening it will not set off any alarms from Microsoft Defender.
According to security researcher, ProxyLife, newer versions of the Calculator app are not affected at this time due to them not being vulnerable to switching DLLs. This is the primary reason why an older version of the application is preferred.
We’re not sure if Microsoft has updated the Defender anti-virus application to pick up on this new threat, so until we get a confirmation, please refrain from downloading files from strange websites or torrents.
Additionally, be wary of email attachments from email addresses you’re not familiar with, and you should be fine going forward.
