However, The Hacker News has learned that Signal developers had already identified this issue as part of a comprehensive fix to the first vulnerability before the researchers found it and reported them. Researchers-Iván Ariel Barrera Oro, Alfredo Ortega, Juliano Rizzo, and Matt Bryant-responsibly reported the vulnerability to Signal, and its developers have patched the vulnerability with the release of Signal desktop version 1.11.0 for Windows, macOS, and Linux users. I can not verify this claim at this moment, but we are in contact with few security researchers to confirm this. We have seen how the same attack technique was recently exploited using a vulnerability in Microsoft Outlook, disclosed last month. Though they haven't claimed anything about this form of attack, I speculate that if an attacker can exploit code injection to force Windows OS to initiate an automatic authentication with the attacker-controlled SMB server using single sign-on, it would eventually hand over victim's username, and NTLMv2 hashed password to the attackers, potentially allowing them to gain access to the victim's system. In this case, remote execution of JavaScript can be achieved by referencing the script in an SMB share as the source of an iframe tag, for example: and then replying to it,' the researchers explain. 'In the Windows operative system, the CSP fails to prevent remote inclusion of resources via the SMB protocol.

In their blog post, the researchers also indicated that an attacker could even include files from a remote SMB share using an HTML iFrame, which can be abused to steal NTLMv2 hashed password for Windows users. This hack literally defeats the purpose of an end-to-end encrypted messaging app, allowing remote attackers to easily get the hold on users' plain-text conversations without breaking the encryption.Īttackers Could Possibly Steal Windows Password As Well

Join our webinar and learn how to stop ransomware attacks in their tracks with real-time MFA and service account protection. Learn to Stop Ransomware with Real-Time Protection

Signal on desktop