Microsoft Disables Own Software Tool to Safeguard Against Malware

Microsoft has deactivated a software tool to prevent malware attacks as it found evidence hackers were exploiting its App Installer. The company disclosed that hackers targeted the ms-appinstaller protocol handler because it could circumvent user protections, including Microsoft Defender SmartScreen and browser warnings for executable file download. Additionally, cybercriminals have been using Teams for malware phishing efforts. Microsoft is countering such threats with AI solutions like its Security Copilot, an assistant building on advanced language models and leveraging Microsoft’s security expertise for rapid threat response.