Virus writers target upcoming Windows scripting language
An Austrian group of virus writers has published new proof of concept malware code that targets the forthcoming Windows Powershell technology.
The MSH/Cibyz worm doesn?t exploit any vulnerability in the scripting tool. Instead it's similar to batch-type viruses written in Javascript or Visual Basic (VB) that instruct a system to install malware after a users executes the script.
"The moral of the story is that there is no particular file type that is inherently safe. There is the possibility of using vulnerabilities in any software application," Allysa Myers, a virus-research engineer with McAfee told vnunet.com.
Powershell malware poses an increased risk over other batch-based threats because
enterprises currently don't block Powershell scripts on their network. Malware authors also could be attracted to the tool because it offers a new challenge.
