New ransomware targets Microsoft Office 365 users
Cerber ransomware variants are targeting MS Office 365 users with a zero-day attack that bypasses the software’s security tools. Cloud security provider, Avanan, has revealed that the ransomware attacks users with spam or phishing emails, which carry the malicious file attachment. The ransomware is then invoked via Macros. Avanan has not specified how many users may potentially have been affected, however, Microsoft’s own figures suggest that in Q1 2016, there were 18.2m Office 365 subscribers. According to Avanan, “57 percent of organizations using Office 365 received at least one copy of the malware into one of their corporate mailboxes during the time of the attack.”

"While difficult to precisely measure how many users got infected," Avanan estimated that "roughly 57 percent of organizations using Office 365 received at least one copy of the malware into one of their corporate mailboxes during the time of the attack."

UPCOMING WEBINAR 🔐 Mastering API Security: Understanding Your True Attack Surface Discover the untapped vulnerabilities in your API ecosystem and take proactive steps towards ironclad security. Join our insightful webinar! Join the Session

How to Protect Yourself from Cerber Ransomware

Always keep your system and antivirus up-to-date.

Regularly backup your files in an external hard-drive.

Disable Macros in your MS Office programs.

Always beware of phishing emails, spams, and clicking the malicious attachment.

You can also use an Intrusion detection system (IDS), for which you can try AlienVault Unified Security Management (USM) that includes an inbuilt IDS with SIEM and real-time threat intelligence to help you quickly detect malware and other threats in your network.

If just relying on the security tools of Microsoft Office 365 can protect you from cyber attacks, you are wrong.Variants ofare now targeting MS Office 365 email users with a massive zero-day attack that has the ability to bypass Office 365's built-in security tools.According to a report published by cloud security provider Avanan, the massive zero-day Cerber ransomware attack targeted Microsoft Office 365 users with spam or phishing emails carrying malicious file attachments.The Cerber ransomware is invoked via Macros. Yes, it's hard to believe but even in 2016, a single MS Office document could compromise your system by enabling ''. Locky and Dridex ransomware malware also made use of the malicious Macros to hijack systems. Over $22 Million were pilfered from the UK banks with the Dridex Malware that got triggered via a nasty macro virus.You can see a screenshot of the malicious document in the latest malware campaign below, targeting Microsoft Office 365 users:While the security firm did not specify the exact number of users possibly hit by the ransomware, Microsoft reported in its first quarter 2016 that there are almost 18.2 Million Office 365 subscribers.Although Cerber originally emerged in March, the malware campaign targeting Office 365 users began on June 22. However, Microsoft started blocking the malicious file attachment on June 23.The Cerber Ransomware not only encrypts user files and displays a ransom note, but also takes over the user's audio system to read out its ransom note informing them that their files were encrypted.The ransomware encrypts files with AES-256 encryption, asking victims to pay 1.24 Bitcoin (nearly US$810) for the decryption key.In order to prevent yourself from the Cerber or any ransomware attack:We have also written a step-by-step tutorial article on How to Protect your Computer from Macro-based Malware , which you can follow to secure yourself.