Computer Security Research - McAfee Avert Labs Blog(情報元のブックマーク数)

最新の標的型攻撃は、PowerPointを利用。ソーシャルエンジニアリングを利用。

The use of social engineering to grab attention of recipients and to deliver malware is not something novel. The latest trend in spreading malware is to manipulate a happening celebrity story, disaster or other high profile news event. The threat could be delivered as emails or poisoned search engine results which leads to malware.

McAfee Threat Center – Latest Cyberthreats | McAfee

PowerpointMS06-028を悪用とのこと。

The malicious PPT file is exploiting an older vulnerability which was patched by Microsoft in ms06-028 bulletin. This attack is detected with the current DATS as Exploit-PPT.h and the dropped malicious executable is detected as BackDoor-EFB.

McAfee Threat Center – Latest Cyberthreats | McAfee

screenshot