Archive

Archive for November 25, 2008

Another worm exploiting MS08-067

Win32/Conficker.A is a worm that exploits the MS08-067 vulnerability in order to spread. It may also download and execute various files. Please note that this is a preliminary analysis.

ooOOoo

Symantec identified a new worm, “W32.Downadup,” exploiting the MS08-067 vulnerability, successful against Windows 2000 unpatched targets.  [Read SecureComputing.net]

ooOOoo

Kaspersky detection: Trojan-Downloader.Win32.Agent.aqfw

About recent OSX Trojan

Good reference and reading for recent OSX trojans: 

CA Blog: New Trojans Strike OS X 

ArborNetworks: New OS X Malcode: Not Just a DNSChanger

There’s a slight changes on DMG (as graphically shown below), depending on the Remote IP address it’s trying to access. 

jahlav_difference