Anybody know if this Trojan, designed to exploit FF and IE, also hurts KM?

http://news.cnet.com/8301-27080_3-10363836-245.html

http://www.symantec.com/security_response/writeup.jsp?docid=2007-121718-10

N

Excerpt from the CNet article:

Quote

In this case the malware, a toolkit called LuckySploit, exploits a known security hole in the browser, and installs the Trojan on the computer.

This is a quite misleading statement IMO because:

Quote

LuckySploit tries to exploit the same vulnerabilities other toolkits are trying to - Adobe Flash and PDF exploits
Source: Finjan report PDF

So far it's primarily an Adobe Flash exploit.
AFAIK Adobe fixed the security hole but it will take some time till every Windows user will update.



Edited 1 time(s). Last edit at 10/03/2009 06:25PM by Yogi.

Quote
Yogi
Excerpt from the CNet article:

Quote

In this case the malware, a toolkit called LuckySploit, exploits a known security hole in the browser, and installs the Trojan on the computer.

This is a quite misleading statement IMO because:

Quote

LuckySploit tries to exploit the same vulnerabilities other toolkits are trying to - Adobe Flash and PDF exploits
Source: Finjan report PDF

So far it's primarily an Adobe Flash exploit.
AFAIK Adobe fixed the security hole but it will take some time till every Windows user will update.

Yogi,

Thanks... I couldn't read most of the posts as they were in German... used KM's Babblefish a couple of times, but didn't get that it was an Adobe and Flash exploit. I'm good there with FlashBlock and just the DLL and Foxit instead of Adobe.

Much thanks for helping me stop sweating!

N