Windows Zero-day Allows Attackers to Bypass Security Warnings Using Malicious JavaScript Files

Threat actors have been seen to abuse Windows zero-day which allows malicious JavaScript Files to bypass Mark-of-the-Web security warnings. Mark-of-the-Web is a Windows security feature that marks a file as downloaded from the Internet and warns users that it has to be treated with caution. Magniber threat actors have been distributing malicious JavaScript files that are digitally signed in a specific way to bypass the MotW flagging. Read more...