Microsoft Disabled App Installer that Abused by Hackers to Install Malware

Threat actors, particularly those with financial motivations, have been observed spreading malware via the ms-appinstaller URI scheme (App Installer). As a result of this activity, Microsoft has disabled the ms-appinstaller protocol handler by default. “The observed threat actor activity abuses the current implementation of the ms-appinstaller protocol handler as an access vector for malware that […]

The post Microsoft Disabled App Installer that Abused by Hackers to Install Malware appeared first on Cyber Security News.

actor app app installer current default disabled financial hackers hacks implementation install installer malware microsoft ms-appinstaller protocol protocol handler result threat threat actor threat actors uri