[ISN] Virus writers are picking up new Microsoft attack

http://www.computerworld.com/s/article/9179564/Virus_writers_are_picking_up_new_Microsoft_attack

By Robert McMillan
IDG News Service
July 22, 2010

The Windows attack used by a recently discovered worm is being picked up 
by other virus writers and will soon become much more widespread, 
according to security vendor Eset.

Eset reported Thursday that two new families of malicious software have 
popped up, both of which exploit a vulnerability in the way Windows 
processes .link files, used to provide shortcuts to other files on the 
system.

The vulnerability was first exploited by the Stuxnet worm, discovered on 
computer systems in Iran last month. Highly sophisticated, Stuxnet 
targets systems running Siemens industrial control system management 
software. The worm steals SCADA (supervisory control and data 
acquisition) project files from Siemens' computer systems.

Siemens issued a Security Update for its customers on Thursday, but 
Microsoft has yet to patch the Windows bug that permits the worm to 
spread.

[...]


_________________________________________________________________
Attend Black Hat USA 2010, hosted at Caesars Palace in Las Vegas, Nevada
July 24-29th, offering over 60 training sessions and 11 tracks of Briefings
from security industry elite. To sign up visit http://www.blackhat.com