Microsoft Confirms PowerPoint Zero-Day AttackBy Ryan Naraine | Posted 2006-07-13 Email Print
A previously unknown software flaw in the widely used Microsoft Office presentation program is being used in targeted attacks traced to China.
For the third time in two months, a zero-day vulnerability in a widely used Microsoft Office software application is being used in targeted hacker attacks.
The latest attack exploits a previously undocumented flaw in Microsoft PowerPoint, the ubiquitous presentation program used by millions of users around the world.
The attack comes just days after Microsoft's July Patch Tuesday and closely mirrors the situation in June when a zero-day Excel attack was discovered 24 hours after Patch Day.
Virus hunters at Symantec linked the zero-day attack to a Trojan horse program called Trojan.PPDropper.B that arrives via e-mail from a Gmail address.
The subject line of the mail and the .ppt file-name are in Chinese characters, suggesting that the attacks are emanating fromand attacking targetsin the Far East.
If the PowerPoint attachment is opened, the Trojan drops and executes a variant of Backdoor.Bifrose.E, a keystroke logger that is used to steal sensitive information and send it back to a remote server controlled by malicious hackers.
Read the full story on eWEEK.com: Microsoft Confirms PowerPoint Zero-Day Attack
IT Solutions Builder TOP IT RESOURCES TO MOVE YOUR BUSINESS FORWARD
Which topic are you interested in?
What is your company size?
What is your job title?
What is your job function?
Searching our resource database to find your matches...