Trojan exploits Internet Explorer hole

By Dan Kaplan on Jun 20, 2012 8:44 AM
Filed under Security

Trusted sites targeted.

Malware writers have unleashed a new trojan that takes advantage of an Internet Explorer (IE) vulnerability patched last week by Microsoft.

The trojan, which security firm Symantec dubbed "Naid," leverages an object-handling weakness that could be used to execute malicious code.

Researchers at Symantec have spotted attackers targeting trusted sites to foist the exploit.

Amnesty International's Hong Kong site temporarily was compromised with a hidden IFRAME, which was used to unknowingly direct visitors to a Russian domain hosting a malicious JavaScript file that exploits the vulnerability.

The victim's machine is then hit with Naid, a remote access trojan first seen circulating in January 2010.

The Amnesty International site is now clean of the malware, according to Symantec.

"(Naid) is a trojan horse program that listens for and accepts a connection from the attacker to essentially provide unauthorised remote control functionality to the compromised computer over a custom communications protocol," a Symantec blog post said on Monday.

"This access allows the attacker to perform numerous nefarious activities such as stealing private information or monitoring internet activities."

Human rights and foreign policy sites are common targets. The same Amnesty International site was compromised just last month to spread a Java exploit, said researchers from the nonprofit Shadowserver Foundation.

Users are advised to install the latest patches (CVE-2012-1875) to protect against the threat.

This article originally appeared at scmagazineus.com

 
Follow us on Facebook and Twitter
 

Copyright © SC Magazine, US edition

Trojan exploits Internet Explorer hole
 
 
 
 
 
Top Stories
How Nadella is re-engineering Microsoft
On the floor at last month's World Partner Conference.
 
Dicker Data on track for billion-dollar goal
Revenue approaches $700m for partial year running Express Data.
 
Datacom's search for a new Australian boss is over
Appointment comes as Kiwi firm profits surge – no thanks to Aussie business.
 
Sign up to receive CRN email bulletins
   FOLLOW US...
Polls
My business strategy is to:

Latest Comments
CRN Magazine

Issue: 330 | August 2014

CRN Magazine looks in-depth at the emerging issues and developments for the channel, and provides insight, analysis and strategic information to help resellers better run their businesses.