|
The last vulnerability de Microsdet is being used to rob confidential data de the users
PandaLabs, the laboratory de detection and analysis de malware de Panda Security, supplier de integral solutions de security that protects the computer against virus, spyware, hackers, Spam and other threats de Internet, has detected several malicious archives that they are taking advantage de the last vulnerability announced by Microsdet (call MS08-067) to infect the users and to rob confidential data like his passwords de instantaneous mail, names de used user and passwords to them during navigation, etc.
This vulnerability affects Microsdet Windows 2000, Windows XP and Windows Server 2003. It can update his system from here: http://www.microsdet.com/latam/technet/seguridad/boletines/2008/ms08-067.mspx
The risk de this type de vulnerabilities is that very they are extended. It is very important that the users update their system the sooner, since the ciberdelincuentes have begun to take advantage de this vulnerability since they had certainty de his existence. All along that their computers are unprotected, it is a time in which they risk to be victim de one de these new malicious codes.
Luis Corrons, technical director de PandaLabs, explains that besides through electronic mail or de infected unloadings, these malicious codes that take advantage de vulnerabilities the system they could even distribute itself through Internet, from legal pages, in such a way that the user would not perceive that he has been infected.
Between all the malicious codes that take advantage de this vulnerability, he emphasizes by his danger the troyano Gimmiv.A, that allows its creators to take the complete control from the infected systems. Once he has infected a computer, the troyano will begin to compile information on:
Names de user and passwords used in the pages de the navigator
Passwords de MSN Messenger
Passwords de Outlook Express
Name de User
Name de the Machine
installed Patches
Information de the Navigator
All the robbed Information is codified having used the Advanced Standard de Codification (AES) and shipment the remote servant.
Luis Corrons indicates that the troyano, when allowing to take the control from the machine to the attackers, is putting to them in disposition to use it with malicious aims like the shipment de Spam, the robbed data storage, and others and adds that in addition, usuary as much domestic as companies more and more make use de the instantaneous mail. Finally Luis Corrons adds that with this troyano, the ciberdelincuentes can accede to all the information that has stored in this tool, which supposes a clear infringement de their privacy.
From PandaLabs he advises himself to the users to update his operating system the sooner and to realize an exhaustive analysis de his equipment in case he had already been infected. He can do it free de charge from is page Web: www.pandasecurity.com/activescan
|
