Trojan exploiting MS08-067 RPC vulnerability
Posted on October 27th, 2008 by admin
If you haven’t pached your Microsoft systems, YOU BETTER!!!
There are reports emerging Friday morning of a new Trojan exploiting the MS08-067 RPC vulnerability in Windows that Microsoft patched with an emergency fix yesterday. Known as Gimmiv.A, the Trojan propagates automatically through networks, and also installs a number of small programs on compromised machines. But its most worrisome capability is a feature that enables Gimmiv.A to find cached passwords in a number of locations and then send them off to a remote server. Before sending the data, the Trojan encrypts the passwords with AES encryption.
Filed under: technology
Tags: Microsoft, Security, Virus