Computer Help Community

Community

Cyber Tech Help Community

New Tutorials

PC Tutorials

New Downloads

PC Downloads

Member Testimonials

Open Member Quote   Back a couple of years ago when I first found this forum I read and read other's problems and learned a bit. Then suddenly one day I had problems and turned to Cyber Tech Help for assistance and my problems were solved. Since then I have kept a number of programs on my computer....run them frequently and keep them updated. During this time its nearly as if spyware, virus and other nasties were never developed. My point is simply this follow the advise you get here...be deligent in using what is suggested and the internet will be a much nicer place. Its only when I see a friend's computer who doesn't use any "protection" that I remember there were such things as pop ups. Thank you Cyber Tech Help - Webster  Close Member Quote
Member Testimonials
MY CYBER TECH HELP

LATEST TOPICS

Tech Help Community

Free Antivirus Scan

Free Virus Scan and a listing of the top 10 viruses in the wild - Free Antivirus Scan
Free Online Antivirus Scan

File Extension Database

Find what program a filetype belongs to in our searchable File Extension Database.
File Extension Database

Services

See what services Cyber Tech Help can offer your business or website: CTH Services
CTH Services

Related MS Links

Related Links
Cyber Tech Help Community

To the top of the page to top

 



Adobe's Vulnerability Fix May Have Triggered Trojan Outbreak

Latest News Latest News | News ArchiveNews Archive | Cyber Tech Help News RSS Feed!

Adobe's Vulnerability Fix May Have Triggered Trojan OutbreakAdobe\'s Vulnerability Fix May Have Triggered Trojan Outbreak

Posted by: Tweaker
Date added: 20:26, 30th October 2007 GMT
Source: Beta News

Symantec

A mere day after Adobe made available a patch for its Reader and Acrobat software that plugs a vulnerability in how that software is leveraged to exploit Windows XP and Internet Explorer 7, technicians at Symantec and elsewhere noticed active exploits in the wild.

"So far we have seen a fair number of emails containing this new Trojan in the wild," wrote Symantec engineer Hon Lau last week. "It is likely that Trojan.Pidief.A has been spammed out in targeted attacks on specific business organizations."

Sophos Labs currently rates the prevalence of the exploit as "Low," and has dubbed it Troj/PDFex-A. As its engineers explain in a bulletin updated yesterday, the version they've discovered "will often arrive as a PDF document attached to an email with a subject line of INVOICE or STATEMENT." Symantec's note says the subject line may actually include "STATEMET," noting the misspelling.

There's nothing particularly unique about the payload it delivers either. Once the offending PDF is opened, Symantec explained, an intentionally malformed URL will trigger the execution of the typical Trojan "Downloader" file, in use since 2001.

Despite the fact that the total assembly time for this exploit may have been less than 10 minutes, given the fact that the entire trigger for the payload was given in a proof-of-concept explanation by a security engineer last month, the typical band of Russian suspects appears to be falling over themselves in a race to take credit. Security engineering form SecureWorks discovered the Trojan prior to Symantec. It believes the payload being delivered is a form of the Gozi Trojan which the company last August claimed was being delivered by servers associated with the Russian Business Network (RBN).

All current and updated versions of Symantec's and Sophos' anti-virus programs are said to be capable of detecting and removing this Trojan.

Tools:  Tools: Post a comment | Link to this news item | Send to a friend | Submit News

 

Post a commentPost a comment

Error: You are not logged in.

In order to leave comments to news articles you must be a Cyber Tech Help Member.

Registration is completely free!  Register to become a member!  Register to become a member

Along with access to leave comments to news articles you will be able to ask any computing questions you might have on the Cyber Tech Help Forums.

 

[ To the top of the page To top | Latest News Latest News | News Archive News Archive | Cyber Tech Help News RSS Feed! ]