Malware creators cash on Olympic lovers
By
siliconindia news bureau
Bangalore: Next time an Olympic invitation blinks on the system, its better to shun the urge to click, as it can be a malware. As Trend Micro, an internet security solution provider warns, these malicious files are designed targeting the Olympic lovers, whereby it attacks the MS Word, MS PowerPoint and MS Excel and allows hackers in remote corners to have a complete control over the affected system.
The MS Word malware has a zero-day vulnerability as it immediately crashes the Microsoft Word 2000, 2002 and 2003 without sparing even its patched versions. These .DOC files are detected to be TROJ_MDROPPER.ZT. These files are zero-day exploits under vulnerability summary CVE-2008-2244 under the Common Vulnerabilities and Exposures (CVE) List of the U.S. Department of Homeland Security's US National Cyber Security Division. However, the Excel files and PowerPoint files, which are revealed to be TROJ_MDROPPER.ZY and TROJ_PPDROP.M, are yet not confirmed having zero-day vulnerability. According to Niraj Kaushik, Country Manager, India and SAARC, Trend Micro, "When exploited, the unspecified remote code-execution vulnerability could cause the application to crash."
The email that is used for the attack contains attachments named attachment.doc, appeal_letter_of_fttj.doc,attend_the_opening_ceremony_of_the_29th_olympic_games_in_beijing.doc, five_resolutions.doc, or lingotto_con_fiat.doc.
The MS Word malware has a zero-day vulnerability as it immediately crashes the Microsoft Word 2000, 2002 and 2003 without sparing even its patched versions. These .DOC files are detected to be TROJ_MDROPPER.ZT. These files are zero-day exploits under vulnerability summary CVE-2008-2244 under the Common Vulnerabilities and Exposures (CVE) List of the U.S. Department of Homeland Security's US National Cyber Security Division. However, the Excel files and PowerPoint files, which are revealed to be TROJ_MDROPPER.ZY and TROJ_PPDROP.M, are yet not confirmed having zero-day vulnerability. According to Niraj Kaushik, Country Manager, India and SAARC, Trend Micro, "When exploited, the unspecified remote code-execution vulnerability could cause the application to crash."
The email that is used for the attack contains attachments named attachment.doc, appeal_letter_of_fttj.doc,attend_the_opening_ceremony_of_the_29th_olympic_games_in_beijing.doc, five_resolutions.doc, or lingotto_con_fiat.doc.
- Terror puts India among 20 most dangerous places
- Expatriate CEOs still feel safe in Mumbai
- Deccan Mujahideen email threatens Delhi
- UK's work-permit norms to affect Indian IT staff
- Expatriate CEOs still feel safe in Mumbai
- Inflation will moderate: Chidambaram
- Karnataka firms seek licence for modern weapons
- Taj hotel premises handed back to Tata group
- Air India cuts fares on all domestic routes
- Inflation will moderate: Chidambaram
- Terror puts India among 20 most dangerous places
- Mumbai terror: IT clients cancel Bangalore visits
- 'Terrorists have no religion; politicians, act responsibly'
- 'Mumbai terror strikes meant to hit Indian economy'
- Online social media comes alive during Mumbai attacks
- MNCs pay more to Indian staff
- Future CEOs may emerge from HR departments
- 'IT industry raised India's international image'
- Former PM V.P. Singh, the Mandal messiah, dies
- Bad bosses can give heart attacks to men




