Zeus botnet exploits unpatched PDF flaw

JRViejo · Apr 15, 2010

Researchers spot first widespread attack using Reader, Acrobat design flaw

The Zeus botnet is now using an unpatched flaw in Adobe's PDF document format to infect users with malicious code, security researchers said today.

The attacks come less than a week after other experts predicted that hackers would soon exploit the "/Launch" design flaw in PDF documents to install malware on unsuspecting users' computers.

The just-spotted Zeus variant uses a malicious PDF file that embeds the attack code in the document, said Dan Hubbard, CTO of San Diego, Calif.-based security company Websense. When users open the rogue PDF, they're asked to save a PDF file called "Royal_Mail_Delivery_Notice.pdf." That file, however, is actually a Windows executable that when it runs, hijacks the PC.
Click to expand...

Computerworld Article By Gregg Keizer.

Log in or Sign up

Zeus botnet exploits unpatched PDF flaw

JRViejo Super Moderator

Log in or Sign up

Zeus botnet exploits unpatched PDF flaw

JRViejo Super Moderator

Useful Searches