Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks
Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks
29 December 2023
Multiple financially motivated hacking groups have been observed using the App Installer service as an entry point for ransomware attacks, leveraging signed malicious MSIX app packages distributed via Microsoft Teams and malicious search engine ads.