Zeus Exploiting Unpatched PDF Flaw

Friday Apr 16th 2010 by Kara Reeder
Share:

Zeus exploits the "/Launch" design flaw to embed attack code in the document.

According to Computerworld, the Zeus botnet is now making use of an unpatched flaw in Adobe's PDF document format discovered by security researcher Didier Stevens.

Zeus exploits the "/Launch" design flaw to embed attack code in the document. The article explains:

When users open the rogue PDF, they're asked to save a PDF file called 'Royal_Mail_Delivery_Notice.pdf.' That file, however, is actually a Windows executable that when it runs, hijacks the PC.

This may be the beginning of the PDF attack wave predicted by Mickey Boodaei, CEO of security company Trusteer.

Share:
Home
Mobile Site | Full Site
Copyright 2017 © QuinStreet Inc. All Rights Reserved