Skip to main content

Windows Vulnerability Targeted by More Malware

posted onJuly 24, 2010
by hitbsecnews

Security researchers have found more malware exploiting an unpatched Windows vulnerability via .LNK shortcut files.

According to Sophos blog July 23, two other pieces of malware have been observed targeting the bug. One is a keylogging Trojan the company is calling Chymin-A that is "designed to steal information from infected computers." The other is Dulkis-A, a "worm written in obfuscated Visual Basic" that contains several subcomponents.

"First it will self-replicate using the malicious link vulnerability to USB devices detected as TROJ/CPLnk-C," explained Chester Wisniewski, senior security advisor at Sophos. "Then it is packed using the TDSS packer, implying it may contain the ability to infect and hide using the TDSS rootkit. It also appears to drop a very old data-stealing Trojan that was originally designed to steal data about Remote Access or dial-up connection information. I have not had enough time to analyze this piece to see if that is in fact what it still does.

Source

Tags

Viruses & Malware

You May Also Like

Recent News

Friday, November 29th

Tuesday, November 19th

Friday, November 8th

Friday, November 1st

Tuesday, July 9th

Wednesday, July 3rd

Friday, June 28th

Thursday, June 27th

Thursday, June 13th

Wednesday, June 12th

Tuesday, June 11th

Simplenews subscription

Stay informed - subscribe to our newsletter.
The subscriber's email address.
Keeping Knowledge Free for Over a Decade

Copyright © 2018 Hack In The Box. All rights reserved.

36th Floor, Menara Maxis, Kuala Lumpur City Centre 50088 Kuala Lumpur Malaysia
Tel: +603-2615-7299 Fax: +603-2615-0088