Malicious swine flu PDF file spreads password stealer

Symantec has reported that an email with a PDF attachment that promises to answer all questions about the swine flu virus contains a password stealer.

Symantec's Kevin Haley claimed that the attachment is named ‘Swine influenza frequently asked questions.pdf' and is a real PDF file, and when opened will show a typical 'questions and answers' layout, however by opening it the recipient is infected. Once the download has been completed a clean PDF is opened as a decoy,

 

Haley said: “Symantec detects the malicious PDF file as Bloodhound.Exploit.6 and the dropped malicious file contained in the PDF as InfoStealer. There is an Adobe patch for this known vulnerability, Adobe Acrobat and Reader PDF File Handling JBIG2 Image Remote Code Execution Vulnerability (BID 33751).

 

“If you haven't already, it's time to start following best practices and download the Adobe patch for your version of Acrobat and Adobe Reader. Protect yourselves and your computer from the human swine that prey on our desire for information to keep us healthy. Be very careful when such email includes attachments, links to websites, or videos that it says you should view.”

 

Meanwhile, F-Secure has revealed that a total of 1,344 domains have now been registered using the words ‘swine flu', although at the last check none of the domains are hosting any malicious files.

See original article on scmagazineuk.com

Copyright © SC Magazine, US edition
Malicious swine flu PDF file spreads password stealer

What are your thoughts on this article? Add your comment below.

To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.

NOTE: You must be a registered member of SC Magazine to post a comment.

Click here to login | Click here to register
comments powered by Disqus
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read