Security Experts at MicroWorld
Technologies inform that a new vulnerability has been identified in Microsoft
Word XP and 2003. It’s currently being exploited in a targeted zero-day attack
using a combination of a Trojan and a Backdoor. As a precautionary measure, MicroWorld
warns users against opening MS Word documents from unknown senders.
‘Trojan-Dropper.MSWord.1Table.bd’
spreads via targeted emails identified to be sent from China and Taiwan. Once
you to download and try to open the infected file, it shows an error message.
If you click on ‘Retry’, the malicious file is replaced by a clean one
immediately!
By this time, Trojan-Dropper has already slipped into
your computer, which then goes ahead and downloads ‘Backdoor.Win32.Gusi’.
This backdoor can open a direct channel that connects to the remote attacker suspected
to be sitting in China, to receive and execute commands. With its rookit capability,
this backdoor can smartly hide itself as well.
Microsoft has already
identified the vulnerability and will be releasing a patch soon. A security response
from the corporation reads “Microsoft is investigating new public reports
of a "zero-day" attack using a vulnerability in Microsoft Word XP and
Microsoft Word 2003. In order for this attack to be carried out, a user must first
open a malicious Word document attached to an e-mail or otherwise provided to
them by an attacker. Microsoft will continue to investigate the public reports
to help provide additional guidance for customers as necessary.”
Security Expert from MicroWorld Technologies,
Arti Taru says “We strongly recommend users not to download and run MS Word
files from strangers, obtained via emails and file sharing networks. Though the
Trojan and Backdoor in question have already been identified, fresher attacks
are anticipated with newer breeds and variants.”
AntiVirus
and Content Security solutions eScan
and MailScan
from MicroWorld proactively protect users from all kinds of malware with a fusion
of signature detection and a highly intelligent behavioral analysis. To stop viruses
and suspicious programs at the gateway level of connectivity, MicroWorld uses
a unique, patent pending technology named MicroWorld Winsock Layer.
MicroWorld
MicroWorld
(www.mwti.net) is the developer of the world's
first Real-Time AntiVirus and Content Security software eScan
for desktops and servers. Its communication security software, MailScan
is the first comprehensive e-mail scanner for your SMTP/POP3 Mail Server. MicroWorld
Winsock Layer (MWL) is the revolutionary technology underlying these products,
powering them to several certifications and awards by some of the most prestigious
testing bodies, notable among them being Virus Bulletin, Checkmark, TUCOWS, Red
Hat Ready, and Novell Ready. Combining their powerful scanner with MWL technology,
MicroWorld solutions provide a Real-Time Proactive security for your systems.
For network security of enterprises, eConceal Firewall is the latest powerful
offering from MicroWorld.
To learn more, kindly visit http://www.mwti.net
