Trojan exploits Internet Explorer hole

Powered by SC Magazine
 

Amnesty International infected with trojan.

Malware writers have unleashed a new trojan that takes advantage of an Internet Explorer (IE) vulnerability patched last week by Microsoft.

The trojan, which security firm Symantec dubbed "Naid," leverages an object-handling weakness that could be used to execute malicious code.

Already, researchers at Symantec have spotted attackers targeting trusted sites to foist the exploit. For example, the Amnesty International Hong Kong site temporarily was compromised with a hidden IFRAME, which was used to unknowingly direct visitors to a Russian domain hosting a malicious JavaScript file that exploits the vulnerability. Then, a victim's machine is hit with Naid, a remote access trojan first seen circulating in January 2010.

The Amnesty International site is now clean of the malware, according to Symantec.

"(Naid) is a trojan horse program that listens for and accepts a connection from the attacker to essentially provide unauthorized remote control functionality to the compromised computer over a custom communications protocol," a Symantec blog post said on Monday. "This access allows the attacker to perform numerous nefarious activities such as stealing private information or monitoring internet activities."

Human rights and foreign policy sites are common targets. In fact, the same Amnesty International site was compromised just last month to spread a Java exploit, said researchers from the nonprofit Shadowserver Foundation.

Users are advised to install the latest patches (CVE-2012-1875) to protect against the threat.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


Trojan exploits Internet Explorer hole
 
 
 
Top Stories
Toll Group to go Google
Poaches Woolworths project manager.
 
How News Corp's CIO tackled skills in his race to the cloud
What to do when your team’s talents are no longer needed.
 
Photos: How Thodey transformed Telstra
From turbulent Trujillo to Australia's leading telco.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  35%
 
Your insurance company
  5%
 
A technology company (Google, Facebook et al)
  9%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  4%
 
A Federal Government agency (ATO, Centrelink etc)
  18%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  7%
TOTAL VOTES: 3956

Vote
Do you support the abolition of the Office of the Information Commissioner?

   |   View results
I support shutting down the OAIC.
  27%
 
I DON'T support shutting the OAIC.
  73%
TOTAL VOTES: 1347

Vote