DIGIT-ARC read-only archive · snapshot: July 23, 2026

Hackers turn to PowerPoint for virus infection

8 posts · originally from https://geek.digit.in/community/threads/hackers-turn-to-powerpoint-for-virus-infection.55450/

Kiran.dks
Kiran.dks Original post #1
Apr 18, 2007 at 7:25 PM
Hackers turn to PowerPoint for virus infection
Research found that PowerPoint now hosts 45 percent of attacks

Malware authors have made Microsoft's PowerPoint their vector of choice for infecting corporate systems.

Microsoft Word was the top choice for malware authors last year looking to embed code in seemingly innocuous documents.

But research from MessageLabs suggests that increased patching of Word, and a slack patching other applications, has prompted hackers to target PowerPoint.

"People expect to find PowerPoint in their emails, more so than applications like spreadsheets," said Alex Shipp, senior antivirus technologist at MessageLabs.

"Also it was a relatively untapped area and there were lots of exploits out there as Microsoft wasn't fixing them very quickly. Microsoft is now patching all these exploits that are brought out at a similar rate to Word."

The research found that PowerPoint now hosts 45 per cent of attacks, compared to 35 per cent in Word documents.

The most common targets were public sector systems, followed by the electronics and aviation sectors.

Surprisingly hackers are not attacking financial companies, although this may be because of improved security measures.

"There is not enough data but I think this is because if they try and steal directly from banks too many alarms go off," said Shipp.

"But where public sector institutions are involved there's a market for the data they hold."

Source
[EDITED]
Third Eye
Apr 18, 2007 at 9:07 PM
Thanks for the info.
gauravakaasid
Apr 18, 2007 at 9:20 PM
OMG :shock: but wat if we turn off macros, will that help??
Kiran.dks
Apr 18, 2007 at 10:26 PM
The exploit may be embedded also! It's always better to scan the file and keep your antivirus/antispyware software shield active.
S
Apr 19, 2007 at 6:44 AM
Will it work if the ppt file is opened in OpenOffice.org? Or in PPT Viewer? I dont have MS Office in my computer, but use OOo... And also have the viewer for checking ppt files created by OOo...

Arun
H
Apr 19, 2007 at 7:28 AM
I think the virus will work even with open office.So ur better off scanning the file..
gauravakaasid
Apr 19, 2007 at 7:42 AM
Kiran_tech_mania said:
The exploit may be embedded also! It's always better to scan the file and keep your antivirus/antispyware software shield active.

can u elaborate on this??? embedded as in?
Kiran.dks
Apr 19, 2007 at 10:25 AM
gauravakaasid said:
can u elaborate on this??? embedded as in?

I am speaking about the embedded tag virus. Some of the virus are tagged to the files as a code. It is ineffective alone as a tag becoz it has no root to run the script unlike in exe files. But an buffer overflow in the application reading the document can activate this tag code and the code gets executed. Some tags are more harmful if the system is online. In absence of a good antivirus scanner, the code could further download a script from malicious site and run the script in the background without user intervention.
Hope its clear now. :)