Do you use Gmail? If you do, you might have noticed a new addition to…

Encryption; why it should matter to you

Springtime for us means it’s time for none another than…spring cleaning! And if there is…

How to spring clean your PC!

Remember that time that you, channeling your inner diva, began to belt it out on…

The dangers of public WiFi

Chalk it up to the fact that homo sapiens have always had to find new…

Curiosity killed the computer

Perhaps it’s no coincidence that “adware” and “annoying” both start with the letter A, because…

Adware goes rogue

We have written a lot about ransomware in all different forms and incarnations here on…

Ransomware, Ransomware , Everywhere

We’re betting you love your smartphone. It’s okay if you do, because you’re in good…

The Banking Trojan in Your Pocket (or, Why Your Smartphone is Way Less Secure Than you Think it is)

Where were you in 2012? If you were on LinkedIn back then, there’s a good…

Have you Been Pwned in the LinkedIn Data Dump? Here is how to Tell!

Remember how your crazy old Aunt Sally stashed all her money in between mattresses because…

Lessons from the SWIFT Fiasco; Could you be Banking Safer ?

June is upon us and with it comes some of life’s sweet little pleasures –…

The Mega Hacks Cometh!

Invariably, if you use the internet a lot, you probably hear the term “The cloud”…

Are You a Closet-Cloud-Confusee? Understanding The Cloud and What it Means for Your Security

Betcha didn’t know it, but June is Internet Safety Month. You probably missed that section in…

June is Internet Safety Month &#8211; How Safe are Your Kids on Social Media?

So if you remember, about two weeks ago we told you about a huge string…

Mark Zuckerberg Gets a Lesson in Password Safety

Boom! Whizz! Bang! Typically, when you think of the Fourth of July, you think about…

The How to Liberate  Your Device From Intruders Guide for the Fourth of July

Wondering what your friend or co-worker is doing, staring at his or her phone, wandering…

Go, Pokemon Go! The Latest Craze that Could Fill your Device with Malware

So not only is Pokemon go the biggest craze ever (seemingly anyway), it also seems…

Privacy in the Age of Pokemon Go!

We are well into the summer and for a whole lot of people that means…

Sure, it's Not Your Fault; But They Got Your CC Info Anyway

We’re finally in the home stretch – In just a few days, school starts up…

8 Essential Back-to-School Cyber Security Tips for a Rockin&#039; (and secure) School Year

Happy National Online Learning Day! Wait, is that even a thing? Well, it is and…

Happy Online Learning Day! (Yup, it&#039;s Really a Thing!)

Here at Reason Software, we are excited to announce the release of Unchecky v1.0. This…

Unchecky v1.0 is Here! Interview with Michael Maltsev

Attention any and all persons weighing 400 pounds or more — Donald Trump thinks you…

Is Cyber Security Worth a Spotlight at the Debates?

Gather ‘round and we’ll tell you a tale (okay, a few tales) of mystery, murder,…

Creepy Tales from the Internet of Things Crypt

As morning hits around the globe, the world is waking up to find out that…

Lessons Learned From the Election Shocker &#8211; Don&#039;t Let Hacks Take You by Surprise

WhatsApp is a great way to keep in touch with far off friends and relatives…

Coming to a Smartphone Near You! The Latest Round of WhatsApp Scams

For better or for worse, the biggest shopping season of the year has arrived. Now…

The Ultimate &quot;How to Not Get Hacked While Shopping Online&quot;Guide

Oh, Thanksgiving Day. You probably get a warm and fuzzy feeling even before the sugar…

The (Rotten) Gift that Keeps on Giving

As if worrying that your Android might suddenly explode wasn’t enough to worry about. Researchers…

The Gooligan Android Breach &#8211; What you Need to Know

It’s that frosty time of year again, when the days are short and the deals…

16 for 2016 &#8211; Don&#039;t Fall for These Holiday Scams!!

“Um, honey, I think we have a problem. The computer is telling me that all…

Vulnerability of the year: Ransomware

2016 has come and gone and now we can look back at the year that…

A is for Apple, B is for BitCoin &#8211; The Most Noteworthy Data Breaches of 2016

It’s been a full fifteen minutes since you last checked your Facebook account (oh, the…

Fake News Flash &#8211; Think Before you Share!

Who doesn’t love a good fishing trip? Go ahead, picture the scene: it’s just you,…

One Phish, Two Phish, Red Phish&#8230;Spear Phish?

Mobile devices have come a long way. We mean a reeeallly long way. In but…

Simple Tips to Spotting Evil Apps

How does the idea of a smart city sound to you? The term might conjure…

The Hidden Dangers in Smart Cities + 5 Bonus Tips to Secure Your IoT Devices

You know the only saying “Nothing is certain but death and taxes”? Seems pretty clear…

5 Tricky Tax Season Scams and How to Avoid Them

When was the last time you went to your bank? If it feels like you’re…

5 Major FinTech Security Concerns You Need to Know About Before You Bank

In honor of Mother’s Day, we thought it would be fitting to take a look…

The amazing mothers of tech

By now, WannaCry is a household name. The ransomware that shocked the world on May…

WannaCry No More? You Better Start Patching

When is adware not just adware? When it’s also malware, of course! Fireball, a new…

Fireball &#8211; the explosive malware heard &#8216;Round the World&#8217;

Imagine this scene: You’re sitting at home one night, happily watching House of Cards on…

Attacks to critical Infrastructures: the next cyber front to worry about

“We pride ourselves on being a leader in managing and protecting data….We also are focused…

Think Your ID was Exposed in the Equifax Breach? Here&#039;s What to do About it

This post has been updated to reflect the current BitCoin to UD Dollar exchange rate,…

Everything You Need to Know About Cryptocurrency

In a recent post, we discussed the basics of cryptocurrency — what it is, how…

The Role of Cryptocurrency In Cyber Crime

Remember the Petya/NotPetya ransomware outbreak from back in June? That was the ransomware that was…

Bad Rabbit: The New Ransomware With Some Famous Cousins

“It’s the most hackable time of the year.”  Oh wait, that’s not how the song…

How to steer clear of Cyber Monday scams

As the holidays draw closer, chances are you’re busy making your gift list and checking…

What NOT to buy for the holidays

Another day, another oddly named malware attack. Last week, researchers from Kaspersky disclosed that they…

ZooPark and Watering Hole Attacks

So now, May 25th has come and gone. If you live in the EU, you’re…

Oh, the irony &#8211; phishers are using GDPR to scam you

Which is worse: getting hit with crypto mining malware or falling prey to ransomware? with…

Ransomware or crypto mining malware? Rakhni is both!

You may not have known, but September 15th is National Online Learning Day. Nowadays, it…

Watch out for online learning scams!

Veux-tu Virobot? For the non-francophones among us, what we’re asking is if you’ve heard about…

Virobot: are monster mash-ups the future of ransomware?

January 28th is International Data Privacy Day. If you’re wondering why data privacy needs its…

It&#8217;s Data Privacy Day: What does your camera know about you?

Today, cameras are everywhere — on our phones, our Alexas, baby monitors, desktops, laptops, home…

Webcam hacking &#8211; taking back what’s yours

In spring 2018, a powerful banking Trojan named BackSwap surfaced, targeting online banking users in…

Browser-based threats;  don’t Worry, we’ve got your back

Another day, another major hack. This time around, India-based outsourcing giant Wipro was hit with…

To Scan or Not to Scan; The Proactive Way to Protect Your PC

  Today is Mother’s Day, the day set aside to honor those special women, who…

The 5 Coolest Mother’s Day Tech Gifts You Can Find (and how to secure them!)

Reason is excited to launch Reason for Business, a powerful endpoint security protection solution for…

We Invite You to Join Reason for Business Beta

Cybersecurity breaches only make the headlines when they involve large entities like banks or tech…

Think SMBs Fall Under the Radar as Targets for Cyber Threats? Think Again.

The threat landscape is undeniably becoming more challenging and more menacing every day. It seems…

Reason Download Defender- It’s time to defend your downloads.

While spring cleaning may only come around once a year, PC cleaning needs to happen…

Should I Remove It? It’s cleaning time! How to declutter your PC.

6 tips for celebrating National Online Learning Day and keeping your data safe! Magnifying the…

To learn (online) or not to learn?

Next up on the ‘crazy meter’, and probably the ‘creepy meter’ as well, is the…

What happens when ‘ransomware’ meets ‘crazy’?

Recently, the cryptoblackmail scam, “ScamYourself”, has returned to the market – many usersworldwide have been…

Threat Analysis Report: Save Yourself Malware

The advent of the Internet and Internet-enabled technologies not only ushered in the era of…

Threat Intelligence; A Unifying Force of the Future.

Halloween: Famous SMB Cyber Attacks in Disguise. Halloween normally conjures up images of costumes and…

All Tricks and No Treats.

Looking for another reason to put on your party hat? Well, we’ve got one: International…

International Internet Day: A Reminder about Security Online.

Before launching into a discussion on how an antivirus detects malware, it’s important to first…

How does an antivirus detect malware?

Start by Installing Reason Cybersecurity – Get 70% Off Today! Think about this for a minute:…

How to Keep Your Business Safe on Cyber Monday.

Hacking has evolved into a billion-dollar growth business, making hackers relentless in their pursuit to…

Can Antivirus Programs Stop Hackers?

Antivirus programs were initially created to distinguish and expel PC infections. Be that as it…

What is antivirus software and how can it protect you?

Get 70% Off Reason Cybersecurity on Black Friday and Keep Your Business out of the…

Cyber attacks and Black Friday: It only takes one to put you on the red

Windows 10, according to theinquirer.net, is a particularly appealing target for hackers and virus writers…

Which Antivirus is Best for Window 10?

I think we can all agree that pups, the friendly, loyal, man’s-best-friend kind are cute…

Unwanted Software Blockers: Why Small Businesses Need Them.

Hackers increasingly target SMBs. What should businesses expect in 2020?

It’s here, 2020, the start of not just a new year, but a new decade…

Small business growth and guardianship in 2020: staying safe from hackers

The first question people usually ask about antivirus (AV) software, is ‘do I really need…

How do you know what antivirus to use?

According to a recent report from statista.com, an online statistics portal, 74% of Americans own…

Which antivirus is best for a Windows 10 laptop?

While there is no quick way to answer which antivirus is better, there are at…

Which antivirus is better?

If a salesperson at a clothing store asked you if you needed any help and…

Browser or big brother? ReasonLab’s secure browsing premium feature protects your business

To answer the question, ‘can antivirus software remove viruses’, we should first examine what antivirus…

Can Antivirus Remove Virus?

The term ‘antivirus’ is a bit of a misnomer today, since today’s antivirus software must…

why antivirus is needed?

The best protection against viruses and malware is reliable, up-to-date, antivirus software. Fortunately, there are…

Which antivirus should I use?

Learning about antivirus programs and how antivirus programs protect your computer is a good first…

How antivirus programs protect your computer

Hackers are always looking for security holes so that they can install malware on your…

Which Antivirus is Best for Laptops?

If you perform a Google search to find out which antivirus is good, the search…

Which antivirus is good?

Windows 10 was first launched in 2015, but it wasn’t until January 2018 that it…

Which Antivirus is Best for Windows 7

Today, Windows 10 comes with Windows Defender, a native, comprehensive antivirus solution already integrated into…

What antivirus software comes with Windows 10?

It’s been over 40 years since the Creeper computer virus, made its appearance, and although…

Is an antivirus necessary?

If Windows is your computer operating system, you’re in good company; according to statista.com, Windows…

Which is the best antivirus for Windows?

We hear a lot about the importance of having antivirus software on our computers, but…

How Does Antivirus Software Work?

According to cybercrime statistics from cpomagazine.com and websitehostingrating.com respectively, cybercrimes account for trillions of dollars…

Why is antivirus software important?

If you’re alarmed by all the news reports about malware attacks and the damage they…

To combat the continuously evolving landscape of cybersecurity threats, antivirus software has been changing and…

How Antivirus Software Works

We hear the terms ‘antivirus’ and ‘antimalware’ bandied about so much it’s easy to understand…

Can antivirus detect malware?

The alarming proliferation of malware and cyber attacks, reported almost daily in the news, has…

What antivirus do I need?

So you’ve finally decided on the antivirus (AV) software you want to install and are…

Will antivirus software remove existing viruses?

“Reaper”, the first antivirus software, was created in response to “Creeper” the first computer virus,…

Are antivirus programs worth it?

Antivirus, aka anti-virus, aka anti-malware, aka security software, has been around since 1971, and yes,…

What do antivirus do?

Cybercrime is a global phenomenon and India has been just as affected by it as…

Which antivirus is best for PCs in India

Cybercrime is on the rise; it is becoming increasingly ubiquitous and menacing. From private individuals,…

Which antivirus should I buy?

Anyone who has ever used an online word processing program - such as Microsoft Word or Google Docs - knows that it’s pretty easy to get distracted with choosing a font. Long gone are the days of simple typefaces - there are now countless options to choose from! But did you know that choosing your fonts isn’t just about aesthetics?

ReasonLabs’ [_Revenge of the Unitrix_](https://reasonlabs.com/research/revenge-of-the-unitrix) report brings to the fore the latest research on how text tricks can make us run malicious code on our devices.  So - what do you as a consumer need to know? Can fonts have viruses?  Can font files contain malware and other cybersecurity risks?

## Downloading free cyber fonts: Is it safe to download free fonts?
First of all, creativity is always to be applauded - but experimenting with new fonts that offer ‘free’ downloads could be a recipe for disaster. If you’ve tried to download free cyber fonts at home before (has anyone else ever attempted to get hold of Disney’s instantly recognizable font?) you’ll appreciate that many fonts are in fact licensed and the ‘free’ version is basically another way to get you to install malware on your device. 

## Can font files have viruses?
In terms of cybersecurity, fonts are another vehicle through which a cyber criminal can act. Suspicious or hacked fonts can be used as a vector for a [spoofing attack](https://cyberpedia.reasonlabs.com/EN/spoofing.html). Although the text may look regular to us, the humble user, your computer will be able to read suspicious encrypted code - and then act accordingly.  

One main clue to watch out for is if a familiar website suddenly becomes unreadable, and a browser alert asks you to download a font to fix it. This is almost certainly a trap, whereby a site has been hacked, and what you are seeing is actually a fake browser alert.

Some examples of font exploits in recent years include the [One Font campaign](https://www.gomyitguy.com/blog-news-updates/one-font-phishing-campaign) which targeted Microsoft 365 users, [ZeroFont](https://securityaffairs.co/wordpress/73708/cyber-crime/zerofont-phishing-attack.html), which manipulated font sizes in order to enact phishing campaigns, and “[hidden text](https://www.theguardian.com/technology/askjack/2006/apr/06/hiddentextinspamandphishi#:~:text=Many%20spam%20and%20fishing%20emails,value%20as%20the%20background%20colour.)”, placed between letters in order to weaken the recognition performance of anti-spam software. 

## Encrypted fonts: Attack of the invisible letters
If we delve even deeper into the language and text used on our devices, we can start to discover that the issues stem even deeper than just the display fonts - to the actual letters themselves.

In the [_Revenge of the Unitrix_](https://reasonlabs.com/research/revenge-of-the-unitrix) report, our researchers have laid out for you a much more detailed and technical look at how different texts have been sabotaged, and what this may mean for the individual and their device. Homographic exploits, such as the Unitrix exploit, are used in order to infiltrate your device with viruses and malware such as infostealers, [Trojans](https://cyberpedia.reasonlabs.com/EN/trojans.html), and [cryptominers](https://cyberpedia.reasonlabs.com/EN/crypto-mining%20malware.html). By misusing a specific invisible [Unicode Standard](https://unicode.org/standard/standard.html) character, malicious attackers can trick a user into opening malicious files.

## Fonts and cybersecurity: Fonts dangers to avoid
Using a maliciously encrypted font can have serious security implications for your computer and personal data. While fonts are not typically associated with malicious activities, cybercriminals can exploit vulnerabilities in software applications and operating systems to deliver malware through seemingly harmless font files. Using an encrypted malicious font can negatively affect your device in a number of ways:

- **Exploiting software vulnerabilities**: Encrypted malicious fonts can be designed to exploit vulnerabilities in font rendering engines of operating systems and software applications. When the font is opened or rendered by a vulnerable program, it can trigger the execution of malicious code.
- **Installation of malware**: If a software vulnerability is successfully exploited, the malicious font can install malware on your system. This could include [viruses](https://cyberpedia.reasonlabs.com/EN/virus.html), [Trojans](https://cyberpedia.reasonlabs.com/EN/trojans.html), [ransomware](https://cyberpedia.reasonlabs.com/EN/ransomware.html), [spyware](https://cyberpedia.reasonlabs.com/EN/spyware.html), or other forms of [malicious software](https://cyberpedia.reasonlabs.com/EN/malware.html).
- **Remote code execution**: Cybercriminals can design malicious fonts to execute arbitrary code on your system. This means that an attacker could potentially gain control over your computer, allowing them to steal your personal data, monitor your activities, or use your computer as part of a botnet for further attacks.
- **Keylogging and data theft**: Some malicious fonts may be used to capture your keystrokes, including sensitive information such as passwords, credit card numbers, or other confidential data. This information can then be transmitted to the attacker's server through an attack known as ‘[keylogging](https://cyberpedia.reasonlabs.com/EN/keystroke%20logging.html)’.
- **System compromise**: Encrypted malicious fonts can compromise your system's integrity and stability. They can lead to crashes, slow performance, and other disruptions that negatively impact your computer's functionality.
- **Data manipulation**: An attacker might use malicious fonts to manipulate the display of text on your computer, altering the content of web pages, documents, or other files.

## Can TTF files contain viruses?
A TTF file, also known as a TrueType Font file, is a type of font file format commonly used in digital typography. It contains information about the shapes, sizes, and other characteristics of typefaces (fonts) that are used to display text on a computer or other digital devices. TTF files are widely used for displaying fonts on various operating systems and software applications.

TTF files themselves are not inherently harmful and are not executable files, which means they cannot run code or perform actions on their own. They are used to define the visual appearance of text and are primarily used by the operating system or applications to render text in a specific font style. 

Although TTF files are not viruses, as with any file type they can still be exploited for malicious purposes in order to deliver malware, such as viruses or other forms of malicious software. If you download a TTF file from an untrustworthy or malicious website, it's possible that the file could contain malware or be a part of a phishing attempt - scammers can carry out file spoofing by disguising malicious files as TTF files, using deceptive filenames or icons to make them appear harmless.

However, it’s reassuring to note that the risk associated with TTF files is generally low compared to executable files like .exe or .bat files. Modern operating systems and security software usually have mechanisms in place to detect and mitigate potential threats from various types of files, including TTF files.

## Avoid malicious fonts and protect your cybersecurity

At an organizational level, companies are recommended to use [network security](https://cyberpedia.reasonlabs.com/EN/network%20security..html) architecture in order to be more aware of possible [obfuscation](https://cyberpedia.reasonlabs.com/EN/obfuscation%20techniques.html) techniques designed by threat actors - and thus avoid falling for typical [social engineering](https://cyberpedia.reasonlabs.com/EN/social%20engineering.html) tactics. Additionally, practicing basic digital hygiene when it comes to cyber fonts and being cautious about the sources from which you download files can help you stay safe from potential threats. If you are still worrying ‘Can fonts contain viruses?’, follow these safety tips when exploring cyber fonts:

- Download files only from trusted sources. There are many well-known websites that offer high-quality free fonts. Avoid downloading from random or sketchy websites, as they might include malware or low-quality fonts.
- Look for fonts that have good ratings and positive reviews from other users. This can give you an idea of the quality and legitimacy of the font.
- Keep your operating system and software up to date with the latest security [patches](https://cyberpedia.reasonlabs.com/EN/patch%20updates.html). This helps protect your system from known vulnerabilities.
- Ensure that you have reputable antivirus software, such as [RAV Endpoint Protection](https://reasonlabs.com/platform/products/endpoint-protection), installed on your computer. This will help detect and prevent any potential malware or viruses that might be embedded in downloaded files.
- Before opening or installing a downloaded font, scan the file with your antivirus software to check for any potential threats.
- Fonts are typically distributed in common file formats such as TTF (TrueType) or OTF (OpenType). Be cautious of downloading fonts in unusual or executable file formats.
- Ensure the website you're downloading from uses secure connections ([HTTPS](https://cyberpedia.reasonlabs.com/EN/https.html)). This helps protect your personal information and the files you download from being intercepted or tampered with.
- Be cautious of websites that have excessive pop-up ads, redirects, or requests for personal information. These could be signs of an untrustworthy site.
- Pay attention to the permissions the font download requests. Fonts don't usually need extensive permissions. If a font installer asks for unusual permissions, it might be a red flag.
- Before installing a new font, consider backing up your important files. This way, if anything goes wrong during the installation, you won't risk losing valuable data.

## Can fonts contain viruses? Safe sites to download fonts
If you are still angling to treat yourself to some new fonts, there are some free reputable options out there that offer a much more secure database, where you can download fonts for personal or commercial use. These websites provide high-quality fonts that are free or available for purchase from trusted designers and foundries. 

If you're unsure about the legitimacy of a font source, research user reviews and feedback before downloading. By using reputable font sources and being cautious about where you download fonts, you can enhance your design projects while maintaining security and legality. Just make sure you do your research first so you can be sure you are acting safely! 

Here are some well-known and reliable sources for downloading fonts:

- [Google Fonts](https://fonts.google.com/) offers a wide variety of open-source fonts that can be used for both personal and commercial projects. The fonts are well-vetted and optimized for web use.
- [Font Squirrel](https://www.fontsquirrel.com/) provides a curated collection of free fonts that are licensed for commercial use. The website ensures that the fonts they offer are high quality and properly licensed.
- [DaFont](https://www.dafont.com/) offers a large selection of free fonts categorized by style. While the website hosts many legitimate fonts, it's important to be cautious and verify the licensing terms of each font, as some may have restrictions.
- [Adobe Fonts](https://fonts.adobe.com/) offers a vast library of high-quality fonts, and it's available to Adobe Creative Cloud subscribers. These fonts are often well-designed and can be seamlessly integrated into various Adobe software applications.
- [FontSpace](https://www.fontspace.com/) features a wide range of free fonts contributed by designers. While many fonts are legitimate, always double-check the licensing terms of each font you download.
- [Fonts.com](https://www.fonts.com/) is a reputable font marketplace that offers a mix of free and paid fonts from well-known foundries. Paid fonts often come with professional support and extended licensing options.
- [MyFonts](https://www.myfonts.com/) is a popular font marketplace where you can purchase fonts from various designers and foundries. It provides a vast selection of fonts for different design needs.
- [Behance](https://www.behance.net/) is a platform for designers to showcase their work. Some designers offer their fonts for free download on their Behance profiles, so it's worth exploring for unique fonts.

For more information about consumer cybersecurity and best practices, and staying cyber safe, visit [www.reasonlabs.com](http://www.reasonlabs.com).







ReasonLabs’ Revenge of the Unitrix report brings to the fore the latest research on how text tricks can make us run malicious code on our devices.  But what do you as a consumer need to know? Can fonts have viruses? Can font files contain malware and other cybersecurity risks? 

#Malware

Can Fonts Have Viruses? Cybersecurity: Fonts Dangers To Avoid