Office惊现零日漏洞 黑客可利用Word文档安装恶意软件

 　　Online banking¹ customers around the world should be on the lookout² for scam emails that allow hackers³ to steal your passwords - and your money.

　　世界各地的网上银行客户们都得小心了！黑客可以用诈骗电子邮件盗取你的密码——以及你的钱！

　　Phishing emails which claim to be from reputable financial organisations contain hidden software - designed to exploit a newly discovered flaw in Microsoft Word.

　　这些钓鱼电子邮件会声称来自信誉良好的金融机构，但是却隐藏有软件--这种软件利用的是微软Word新发现的一个漏洞。

　　Documents opened with the word processing software may trick users into downloading code that allows cyber criminals to infect their computer and capture banking logins.

　　这种Word文档会欺骗用户下载代码，而网络罪犯可以利用这些代码感染用户的电脑，从而获得银行登录信息。

　　Cyber security firm Proofpoint warned that the exploit was being used to spread the trojan software - called Dridex.

　　网络安全公司Proofpoint日前警告称，该漏洞被用来传播一种被称为“Dridex”的木马软件。

　　Office惊现零日漏洞 黑客可利用Word文档安装恶意软件

　　Dridex has previously⁴ been used to steal online banking passwords globally, resulting in the theft of hundreds of millions of dollars worldwide.

　　Dridex曾经就被用于在全球盗窃网上银行密码，造成全世界范围内数亿美元失窃。

　　During an outbreak of the virus in 2015, the US was most heavily affected⁵ according to computer security firm Symantec.

　　据电脑安全公司赛门铁克表示，在2015年该病毒肆虐期间，美国受灾最严重。

　　This was followed by Japan and Germany, with significant numbers of infections also seen in the UK, Canada, Australia, and a number of other European countries.

　　其次是日本和德国，而英国、加拿大、澳大利亚和多个欧洲国家感染者也为数众多。

　　The latest email campaign started in Australia, but experts are warning this could quickly spread to the rest of the world.

　　而此次通过电子邮件传播病毒的事件起于澳大利亚，但是专家警告称，很可能很快就会蔓延到世界其他地区。

　　The exploit targets a previously undiscovered flaw - known in security circles as a 'zero-day' vulnerability - in the software.

　　该漏洞针对的是Word之前一个未发现的缺陷——在安全界被称为“零日”。

　　This allows hackers to insert malicious⁶ code into the body of a document - in this case fake RTF files (Rich Text Format) which are actually disguised HTML code.

　　黑客可以利用该漏洞，将恶意代码插入到一个文档中——这样一来，RTF格式的文件实际上是变相的HTML代码。

1 banking   

n.银行业，银行学，金融业

参考例句：

• John is launching his son on a career in banking.约翰打算让儿子在银行界谋一个新职位。
• He possesses an extensive knowledge of banking.他具有广博的银行业务知识。

2 lookout   

n.注意，前途，瞭望台

参考例句：

• You can see everything around from the lookout.从了望台上你可以看清周围的一切。
• It's a bad lookout for the company if interest rates don't come down.如果利率降不下来，公司的前景可就不妙了。

3 hackers   

n.计算机迷( hacker的名词复数 )；私自存取或篡改电脑资料者，电脑“黑客”

参考例句：

• They think of viruses that infect an organization from the outside.They envision hackers breaking into their information vaults. 他们考虑来自外部的感染公司的病毒，他们设想黑客侵入到信息宝库中。 来自《简明英汉词典》
• Arranging a meeting with the hackers took weeks againoff-again email exchanges. 通过几星期电子邮件往来安排见面，他们最终同意了。 来自互联网

4 previously   

adv.以前，先前（地）

参考例句：

• The bicycle tyre blew out at a previously damaged point.自行车胎在以前损坏过的地方又爆开了。
• Let me digress for a moment and explain what had happened previously.让我岔开一会儿，解释原先发生了什么。

5 affected   

adj.不自然的，假装的

参考例句：

• She showed an affected interest in our subject.她假装对我们的课题感到兴趣。
• His manners are affected.他的态度不自然。

6 malicious   

adj.有恶意的，心怀恶意的

参考例句：

• You ought to kick back at such malicious slander. 你应当反击这种恶毒的污蔑。
• Their talk was slightly malicious.他们的谈话有点儿心怀不轨。