KASPERSKY
Security expert Kaspersky Lab has identified a backdoor vulnerability in Windows that allows hackers to discretely control the devices they want to affect. The company points out that this type of malware is "extremely dangerous" because it can affect computers with malicious programs.
While he claims that such situations are difficult to hide in security solutions, they may go unnoticed by a backdoor that takes advantage of a previously unknown system error such as zero day vulnerabilities. Kaspersky says that security solutions may not protect users because they do not know what it is or whether it exists.
Kaspersky has used prevention technology to detect the attempted abuse of the hitherto unknown vulnerability of Windows. He explains, "Once the malicious .exe file was run, malware installation started. The infection used a zero day vulnerability and managed to do so with privileges to remain inside the victim's team. " Then, using a scripting framework called Windows PowerShell, a legitimate Windows element present on all machines that use this operating system, the malware executed a backdoor.
From there, the hackers could act in a silent way, avoiding being detected. The malware then unloaded another backdoor from the well-known text-storage service, giving hackers full control over the infected system.
Kaspersky says Microsoft has already been informed of the vulnerability on April 10. Among the exploits are the following, which you should check with the security solutions on the market, including those of the specialist:
-HEUR: Exploit.Win32.Generic
-HEUR: Trojan.Win32.Generic
-PDM: Exploit.Win32.Generic Mundophone
No comments:
Post a Comment