|
Just this week Adobe patched a major problem with its Acrobat and Reader programs. The issue? Flaws that could allow malicious exploits. Now, it seems hackers are using the precious time between update release and update download to unleash a flood of malicious code. According to Symantec Corporation, the exploits are still alive and well for the bulk of users yet to update. "This mass mailing of exploit files may be an attempt to leverage the exposure window between patch release and widespread adoption of the fix," they said.
What should Adobe users be on the lookout for? Symantec warns everyone to avoid YOUR_BILL.pdf and INVOICE.pdf especially, but to also be wary of just about any PDF file arriving via email. Even if your electronic mail program doesn't identify the file or sender as spammy, making sure you're well acquainted with the sender (and they like you). (Source: pcworld.com) What can happen if I open such a PDF file? The bug itself exploits the "mailto:" protocol hole identified quite a while ago by U.K. researcher Petko Petkov. In my last article on the subject, neither Microsoft nor Adobe had mentioned him or whether they took his early warnings seriously. Once the user opens the rogue PDF file via email, the PDF immediately launches a Trojan dubbed "Pidief.a". This will besiege and eventually topple a computer's defenses (Windows Firewall), before downloading another set of malware that allows a remote hacker to hijack the PC. (Source: crn.com) Although Adobe appears to have made a satisfactory fix with the release of update Version 8.1.1., it takes a user downloading that patch in order to eradicate the threat. Since many people still haven't even heard either the bug or the fix exist, hackers are using their slowly closing window of opportunity to cause as much trouble as possible.
-- Related newsletter articles:
2007/10/25 Adobe Acrobat and Reader Repaired (adobe)
2006/07/08 Flashplayer 9: Adobe's Newest Media System (adobe)
2007/05/18 Apple, Microsoft, Adobe and Real Networks Threatened ... (adobe)
2007/10/17 Windows Vista Becomes Victim of Windows Update Snafu (update)
2004/06/16 Windows Update XP won't download Critical Updates? (update)
2004/07/06 Windows 98SE 'all in one' Service Pack + updates? (update)
2006/04/27 Microsoft Fights Piracy with PopUp Notifications (update)
2006/07/05 Windows Genuine Advantage: The Lowdown (update)
2005/05/17 Which web browser is the most secure? (update)
-- Recent articles (from all channels): 2008/05/12 Today in History: for Monday, May 12, 2008
2008/05/12 [ShellX 20080512]: 'Remote Manager', and 'Cyber Bandwidth ...
2008/05/12 Video Gaming Trade Group Struggling
2008/05/12 T-Mobile Finally Joins 3G Phone Race
2008/05/12 Apple Slammed by Environment Watchdog
2008/05/09 [ShellX 20080509]: 'Advanced Run', and 'Diver Windows Manager'
2008/05/09 Texas Refuses Facebook Friend Request
2008/05/09 Photo-Enforcement Technology Replaces Officers On Patrol
2008/05/09 Cuban Government Says 'Ok Computer'
2008/05/09 Excel Can E-Mail Your Weekly Reports For You!
2008/05/08 [ShellX 20080508]: 'Shell Enhancer', and 'Lansweeper'
2008/05/08 Xobni: MS Outlook Social Networking Technology for your Inbox
2008/05/08 Music Companies Jump on GTA IV Bandwagon
2008/05/08 Fascinating: Memristor to replace Binary
2008/05/08 Adobe Hopes To Make Flash Master Of The (Mobile) Universe
2008/05/08 Spiffy Envelopes and Labels in MS Word
2008/05/07 [ShellX 20080507]: 'Winbin2iso', and 'Loop Typer'
2008/05/07 Yahoo Adds Security Warnings To Search Results
2008/05/07 Apple to Lose Money on iTunes Movie Releases
2008/05/07 Amazon.com takes New York Tax to Court
2008/05/07 Need Glasses for the Slide Sorter View in MS PowerPoint?
2008/05/07 After Winning The DVD Format War, Blu-Ray Sales Tank
2008/05/06 [ShellX 20080506]: 'Visual Basic 6.0 Portable', and 'Double-...
2008/05/06 Yahoo Outsources to Jajah
2008/05/06 New HP Circuit Could Change Technology Forever
2008/05/06 Movie Downloads To Match DVD Release Dates
2008/05/06 Microsoft Ends Yahoo Bid
2008/05/05 [ShellX 20080505]: 'Ie7 Pro', and 'Desktop Ok'
2008/05/05 The WB Network Hops Online
2008/05/05 Microsoft Slashes Price of Xbox 360 Overseas
2008/05/05 Google CEO Wants YouTube to Take More of Your Money
|
