Windows 0-day is exploited to install creepy Finspy malware (again)

September 12, 2017

Enlarge / The WSDL parser, where the zero-day was located. (credit: FireEye)

On Tuesday, Microsoft patched a previously unknown vulnerability that researchers say was actively exploited by an undisclosed nation to install surveillance malware on one or more vulnerable computers.

The exploit, according to a blog post published Tuesday by security firm FireEye, was embedded in a Microsoft Word document. Once opened, the document exploited a zero-day vulnerability in Microsoft’s .Net framework. The exploit caused the targeted computer to install Finspy (sometimes “FinSpy”), a family of surveillance software that its controversial developer, UK-based Gamma Group, sells to governments throughout the world. Tuesday’s blog post said the document might have been used to infect an unnamed “Russian speaker.” The vulnerability, indexed as CVE-2017-8759, comes five months after FireEye disclosed a different zero-day being used to distribute Finspy.

“These exposures demonstrate the significant resources available to ‘lawful intercept’ companies and their customers,” FireEye researchers wrote. “Furthermore, Finspy has been sold to multiple clients, suggesting the vulnerability was being used against other targets.”

Read 4 remaining paragraphs | Comments

Source: http://feeds.arstechnica.com/arstechnica/index/

Da Feed

Author: Da Feed

The Charles Tendell Show aggregates the best content from all over the web. Check out the latest in tech, politics, and more at thecharlestendellshow.com/news. Get your own website added to the feed by contacting us today!

Comments are closed.

© 2016 The Charles Tendell Show