12345

9/26/2012

[Warning] New Internet Explorer Zero-Day exploits

1. Introduction

Zero-day exploit code for Internet Explorer of Microsoft has been detected on Italian certain web site. A zero-day (or zero-hour or day zero) attack or threat is an attack that exploits a previously unknown vulnerability in a computer application, meaning that the attack occurs on "day zero" of awareness of the vulnerability. Microsoft is analyzing that vulnerability. Malicious files were reported at Italian web site for winter supplies. And now, all exploit code had been removed.




2. Malicious file information

IE 0-day malicious files were found on following web site.


Files were submitted on September 14, 2012, and removed on September 16, 2012. exp.txt is only remained.



Reported Virus Total's results are as following.

[exploit.html]
https://www.virustotal.com/file/9d66323794d493a1deaab66e36d36a820d814ee4dd50d64cddf039c2a06463a5/analysis/

[Moh2010.swf]
https://www.virustotal.com/file/70f6a2c2976248221c251d9965ff2313bc0ed0aebb098513d76de6d8396a7125/analysis/

[Protect.html]
https://www.virustotal.com/file/2a2e2efffa382663ba10c492f407dda8a686a777858692d073712d1cc9c5f265/analysis/

[111.exe]
https://www.virustotal.com/file/85ad20e922f5e9d497ec06ff8db5af81fbdcbb6e8e63dc426b8faf40d5cc32c6/analysis/

"exploit.html" will execute Moh2010.swf which contains DoSWF(http://www.doswf.com/) program and can execute "Protect.html" with using iframe script.




"Protect.html" works for aiming at IE 7 and 8. It will try to install "111.exe" which were encoded XOR.



Upon executing "111.exe", it will install "mspmsnsv.dll" on system folder and try to access on certain host.

3. Summary

INCA Internet response team is fortifying security monitoring about IE 0-day vulnerability and abnormal symptom. New variants of malicious file can be detected by our nProtect Anti-Virus family. Users need to maintain latest update from being safe by these malicious files. Furthermore, in case of being spread by web site, these files are using security vulnerability. So, latest updates of OS and applications used frequently are needed. To use PC safely from security threats of these malicious attachments, we recommend you download latest security updates and obey following "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.

INCA Internet (Security Response Center / Emergency Response Team) runs responding system against various security threats.
nProtect Anti-Virus/Spyware v3.0 diagnoses and treats various variant files.

Free installation link of nProtect AVS : http://avs.nprotect.com/

36 comments:


  1. Wonderful company now cleans houses and cottages and villas and buildings, companies, palaces and all the facilities that need to be cleaned wonderful company شركة تنظيف بالرياض Distinct and strong and firm with great knowledge Dear Customer, We are the first company in Riyadh demolished cleaning In some cases, be the ideal company is the company شركة تنظيف شمال الرياض You will find located in the north and the wonderful company in the west and south and east of Riyadh, God Almighty to شركات تنظيف بالرياض Multiple in abundance and at the rate we are today known to the customer that we are the best ever in our company Dear Customer dexterity and strength and equality شركات نظافة بالرياض Call wonderful group until you clean the house

    ReplyDelete
  2. Playbox is one of the best apps among all the others which provide streaming of movies and tv shows.
    The best part is, it is absolutely free for everyone and it also provides multiple resolution of the videos.
    You can also watch the videos even when you are offline
    PlayBox Apk

    ReplyDelete
  3. Nếu bạn đang cần công ty chuyển hàng từ thái lan về việt nam hãy liên hệ với chúng tôi. Chúng tôi sẽ giúp bạnmua hàng thái lan online một cách dễ dàng. Chỉ cần đưa thông tin sản phẩm bạn cần cho chúng tôi, chúng tôi sẽ mua và vận chuyển về Việt Nam. Khi chỉ là mỗi Thái Lan chúng tôi còn có các dịch vụ khác như: dịch vụ chuyển hàng từ mỹ về việt nam, dịch vụ vận chuyển hàng đi campuchia, dịch vụ đặt hàng quảng châu giá rẻ, .... Nếu bạn cần mua hàng trung quốc giá rẻ hay cần mua hàng trên taobao hãy liên hệ và sử dụng
    dịch vụ order hàng thái lan giá rẻ của chúng tôi. Chúng tôi sẽ giúp bạn
    kinh nghiệm shopping tại thái lan

    Lưu ý : Bên hàng thái chúng tôi còn vận chuyển cả nhạc cụ đàn tỳ bà các bạn nhé!!!

    ReplyDelete
  4. تخلصك من الحشرات المنزل بانواعها و القوارض نهائيا ؛ و عمل الكشف الدورى من ضمن خدماتها لضمان مستوى الخدمة و التاكد من بيئة صحية ,
    شركة المثالية لمكافحة الحشرات القيام باعمال المكافحة الشامله على اعلى مستوى من الحرفيه فى مكافحة الحشرات فى جميع الاوقات هي افضل ما يمكن الحصول علية تقدم خدمة سريعةمبيدات ذات فاعليةاسعار مناسبةلا شك ان الحشرات تثير الذعر عند شركة كشف تسربات المياه بالاحساء
    شركة عزل اسطح بالاحساء

    ReplyDelete
  5. I think Zero day vulnerabilities can be serious security risks. When searching for an appropriate antivirus solution, look for security software that protects against both known and unknown threats
    Zero-day attack

    ReplyDelete
  6. Great homework planner app can be downloaded here!

    ReplyDelete
  7. Thankful to you for this informative post. I always like to read content that pointing to some useful thought or it makes readers to think. UK dissertation writing service

    ReplyDelete
  8. The author has explained the technical aspects in an understandable manner. You have shown absolute justice to the topic. Best essay writing service reviews

    ReplyDelete
  9. Walmart, the world’s largest company by revenue, mostly accepts Discover,Amex (American Express) or Visa cards. Walmart offers two credit card options to its consumers – a store-only card and a MasterCard.

    walmart credit card login

    ReplyDelete
  10. The Kerala State Education Board is the most reputed Board of Education in India. The primary duty of the board is to prepare the syllabus for schools affiliated with this board.

    www.keralaresults.nic.in

    ReplyDelete
  11. Great this article is very helpful. Thank you for the valuable information.
    visit our website

    ReplyDelete
  12. Thank you for this post. This is very interesting information for me.

    ReplyDelete
  13. Thanks for sharing, nice post! Post really provice useful information!

    Giaonhan247 chia sẻ trang web mua hàng mỹ với kinh nghiệm mua hàng trên amazon nhật cũng như cách mua hàng trên ebay ship về việt nam và hướng dẫn cách đấu giá ebay cùng với bảng giá cước phí gửi hàng đi úc uy tín, giá rẻ.

    ReplyDelete
  14. In order to fully understand all the information from your article, I will need to obtain some additional knowledge on this topic.

    ReplyDelete
  15. LiteBlue is the U.S. Government website this is intended for authorized use only by Postal Service employees, lite blue.
    liteblue usps

    ReplyDelete

  16. نستخدم افضل ادوات تنظيف و غسيل الخزانات لاننا افضل شركة تنظيف خزانات المدينة المنورة و عمال مروبون وحاصلون على شهادة صحية فقط اتصل بنا لتحصل على افضل خدمة تنظيف خزانات بالمدينة المنورة
    ونقدم ايضا شركة مكافحة حشرات المدينة المنورةتقضي على جميع الحشرات

    http://www.atar-almadinah.com/mokafha.html

    ReplyDelete

  17. mumbai girls whatsapp numbers Real Girls WhatsApp Numbers for Chatting & Friendship - Girls WhatsApp Numbers For Chatting & Friendship

    ReplyDelete
  18. I really dislike when the sites I go to can be harmful to my computer, and if I see such a pre-alert, I interrupt the transition to such a site.

    ReplyDelete
  19. The subject of Philosophy and its subcategories have been widely discussed in both the Western and non-Western world albeit with different focuses. Philosophy includes many different subfields involving investigation into our existence. These subfields include epistemology, ethics, logic, metaphysics, philosophy of science, social and political philosophy, and Metaphilosophy. Epistemology focuses on the study of Knowledge, also known as “Theory of Knowledge”. Ethics involves the study of moral values and rules, Logic; the study of reasoning. Metaphysics is the study of being and knowing also known as the principles of reality. Read more at http://writeacoverletters.com

    One of the first points to be clear about is that a philosophical essay is quite different from an essay in most other subjects. That is because it is neither a research paper nor an exercise in literary self-expression. It is not a report of what various scholars have had to say on a particular topic. It does not present the latest findings of tests or experiments. And it does not present your personal feelings or impressions. Instead, it is a reasoned defense of a thesis.

    ReplyDelete
  20. Our accounting homework help is the best homework providing company. We believe that our homework plays an important role in the final grades of students. Due to several reasons, students are unable to write accounting homework. Accounting homework requires remarkable knowledge as well as in-depth understanding of the accounting concepts. Students should get our accounting homework help at our company’s website.

    Biology, the study of life, can be fascinating and wondrous. However, certain biology topics can sometimes seem incomprehensible. The best way to get a clear understanding of difficult biology concepts is to study them at home, as well as at school. Students should use quality accounting homework help resources when studying. Below are some good resources and information to help you answer some of your biology homework questions.

    ReplyDelete
  21. It's surprising you aren't more popular given that you definitely possess the gift.
    liteblue.usps.gov

    ReplyDelete
  22. Similarly, knowing which areas of physics you need help with will help you to find a tutor who is qualified. Overall, the most important thing to consider when searching for a physics tutor, is someone who is flexible in their tutoring style and willing to try new teaching techniques that best fit their student.

    Physics assignments are complicated projects that require a lot of time, due to the use of Physics formulas and the prerequisites in math. Completing the physics assignments successfully requires a great deal of knowledge, skills and sometimes assistance from qualified online physics help providers.You can get professional homework help at My homework

    ReplyDelete
  23. For students help you just look at the Assignment help given by the assignment experts. Opting for our Assignment Help Online could be ideal for such students and they can get a complete assignment solution n from us.

    ReplyDelete
  24. In the healthcare business, nurses are finding that individuals who have pursued an RN-BSN diploma program tend to be times prepared to proceed from traditional patient care to distinct roles in the health care sector. You can read more at nursing essays

    ReplyDelete
  25. Best Homework Helper is home to more than 3000 online live college homework tutors who are quite impressive in solving various primary homework related issues. In fact, some of these tutors hold a PhD degree, which clearly shows how competent they are at handling various school and college homework problems.

    ReplyDelete
  26. So why choose us when looking for professional assistance on writing successful medical school essays ? The answer is obvious. We are the team that conceals no information from our customers. You are always welcome to browse our reviews section to discover how satisfied our customers are. We are very proud of our good name and reputation and we are happy to see every single positive response and evaluation of our best practices. From the number of positive responses on our website you may see that we excel ourselves to meet the highest standards you require and we are extremely good at that.

    The fact that you are on cosmetic surgery research paper outline right now means you have found a company of professional essay writers you can trust. A reputable team of highly educated and vastly experienced essayists, we will make sure that the piece of writing you purchase from us is the best one you can imagine. The writers from our agency have the necessary education to give you a very good argumentative essay on health care or an original research paper on health care because health care issues are among the most prioritized directions of our business.

    ReplyDelete
  27. superior article im gonna bookmark this page ,and great thanks to author for sharing such a info with us Whatsapp Status I Personally Like Your Post; You Have Shared Good Insights And Experiences. Keep It Up.

    ReplyDelete

  28. Assignment help Reviews has helped many students to choose the right website. It has also helped the students to score good grades in their academics. Our writing services review will help you to find the best writing websites for your success.

    ReplyDelete
  29. Don't forget to visit EssayAssignmentHelp.com.au for getting quality essay help services on-time in Australia.

    ReplyDelete
  30. MyAssignmenthelp.com being one of the most active Assignment Help websites has a pool of over 4500+ assignment experts from Australia, UK and US. They are highly qualified and skilled professional writers who have vast experience in writing assignments, dissertations, essays, research papers, term papers etc. Each expert is chosen after rigorous testing and has to prove his academic credentials.

    ReplyDelete