Most people who work in an office environment have heard of or used the web conferencing product WebEx at some point. Recently, Cisco announced a critical vulnerability with that product that can allow an attacker to execute arbitrary code on an infected system. That’s not an insignificant issue and anyone who has ever used the product should be aware of potential phishing using this flaw.
The bug, which is referenced as CVE-2018-0264, is within WebEx’s Recording Player for Advanced Recording Format (ARF). This feature allows users to replay meeting recordings at a later date. If a malicious link is clicked, code can be set loose that probably is not desired.
Because WebEx is so widely used, everyone should be aware of potential phishing scams using this for bait. It’s not unusual to get the link after attending a webinar. Most organizations do record those and send it to attendees for reference. So, definitely be aware of any links received. This one may have some variation of the message “Thanks for attending our webinar. Follow the link to access the event recoding.”
There is currently no workaround for this and if you have ever clicked a link to hear an ARF file, the software to play it was automatically downloaded. Unless you specifically removed it, it’s probably still on your system. If you don’t need WebEx software and it’s still on your computer, take a moment to remove it, just for extra caution. You can always download it again later if you need it.
WebEx Business Suite, WebEx Meeting, WebEx Meetings Server, and WebEx ARF are all affected by this.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
