As of February 13th, 2017, Gmail has started deploying their new restrictive policy on .js file attachments, extending their list of file types blocked for security reasons. After the full release, Gmail users won’t be able to send or receive mail containing .js attachments, even if they’re in a compressed and archived form. Seeing that JavaScript attachments have proven to be one of the most popular ways for cybercriminals to spread their malicious work worldwide, this is good news. Only in the past six months, ESET LiveGrid® has recorded tens of millions detections of JS/Danger.ScriptAttachment, which is ESET’s detection name for malicious .js script spreading via email attachments.
View full story
ORIGINAL SOURCE: We Live Security