Security Experts at MicroWorld
Technologies inform that a new vulnerability has
been identified in Microsoft Word XP and 2003. It’s
currently being exploited in a targeted zero-day attack
using a combination of a Trojan and a Backdoor. As
a precautionary measure, MicroWorld warns users against
opening MS Word documents from unknown senders.
‘Trojan-Dropper.MSWord.1Table.bd’ spreads
via targeted emails identified to be sent from China
and Taiwan. Once you to download and try to open the
infected file, it shows an error message. If you click
on ‘Retry’, the malicious file is replaced
by a clean one immediately!
By this time, Trojan-Dropper has already slipped
into your computer, which then goes ahead and downloads
‘Backdoor.Win32.Gusi’. This backdoor can
open a direct channel that connects to the remote
attacker suspected to be sitting in China, to receive
and execute commands. With its rookit capability,
this backdoor can smartly hide itself as well.
Microsoft has already identified the vulnerability
and will be releasing a patch soon. A security response
from the corporation reads “Microsoft is investigating
new public reports of a "zero-day" attack
using a vulnerability in Microsoft Word XP and Microsoft
Word 2003. In order for this attack to be carried
out, a user must first open a malicious Word document
attached to an e-mail or otherwise provided to them
by an attacker. Microsoft will continue to investigate
the public reports to help provide additional guidance
for customers as necessary.”
Security Expert from MicroWorld
Technologies, Arti Taru says “We strongly
recommend users not to download and run MS Word files
from strangers, obtained via emails and file sharing
networks. Though the Trojan and Backdoor in question
have already been identified, fresher attacks are
anticipated with newer breeds and variants.”
AntiVirus and Content Security solutions eScan
and MailScan
from MicroWorld proactively protect users from all
kinds of malware with a fusion of signature detection
and a highly intelligent behavioral analysis. To stop
viruses and suspicious programs at the gateway level
of connectivity, MicroWorld uses a unique, patent
pending technology named MicroWorld Winsock Layer.
MicroWorld
MicroWorld (www.mwti.net)
is the developer of the world's first Real-Time AntiVirus
and Content Security software eScan
for desktops and servers. Its communication security
software, MailScan
is the first comprehensive e-mail scanner for your
SMTP/POP3 Mail Server. MicroWorld
Winsock Layer (MWL) is the revolutionary technology
underlying these products, powering them to several
certifications and awards by some of the most prestigious
testing bodies, notable among them being Virus Bulletin,
Checkmark, TUCOWS, Red Hat Ready, and Novell Ready.
Combining their powerful scanner with MWL technology,
MicroWorld solutions provide a Real-Time Proactive
security for your systems. For network security
of enterprises, eConceal Firewall is the latest
powerful offering from MicroWorld.
To learn more, kindly visit http://www.mwti.net.
