Microsoft OneNote is a digital note-taking application that allows users to create and organize notes, drawings, and audio recordings in one place. It is available as part of the Microsoft Office suite or as a standalone application. OneNote provides a flexible and customizable workspace for users to capture and organize their thoughts and ideas. Users can also share their notebooks with others, collaborate in real-time, and access their notes from anywhere with an internet connection. OneNote has become a popular tool for students, professionals, and individuals looking to streamline their note-taking and organization processes. Its features include the ability to clip web pages, highlight text, add tags, and search for notes easily.

Microsoft

Microsoft is set to release an update to its OneNote application in April to improve its protection against known high-risk phishing attacks. The move comes after TrustWave reported in January that attackers were using OneNote’s native .one file format to launch phishing attacks via email. When users open OneNote attachments, they see a blurry thumbnail and a “View Document” button. If the button is clicked, a security alert pops up, warning that opening the attachment could harm the computer and data.

If the user ignores the warning and clicks OK, a WSF file in OneNote is executed. WSF, or Windows Script File, is used by Microsoft Windows Script Host. If the user still chooses to proceed, the WSF file embedded in OneNote will then run a PowerShell command to download and execute the file from the internet. The new feature is expected to provide greater protection for OneNote users against phishing attacks.

RELATED:

(Via)