'Gumblar' web attacks spreading quickly

TalkBack 5 of 24:

Next »

« Previous

• Thread View
• Flat View

Not really....this is not so much about browsers

Recent reports have shown that the automatic update feature of FF allows fixes to be applied quickly to a large percentage of FF users, making any attempt to utilize any of the bugs you highlighted a complete waste of time. These bugs are already fixed for the vast majority of persons using FF, and almost everyone will be using the latest version, 3.0.10.

In any case, this attack is actually targeting the Adobe Reader and the Flash player plug-in that IE users are using (an active X plug-in), not browser vulnerabilities present in IE. When the victim visits an infected site, they get redirected to the Gumblar website which then pushes an infected pdf unto the PC as well as attempts to use a flash exploit. Once on the PC, the malware disables things like regedit, antivirus software and cmd, looks for ftp client passwords, and redirects your Google searches to sites that usually also push malware. It's unclear to me if the latest version of Adobe Reader is vulnerable - i'm seeing conflicting reports online. Turning off Javascript in Adobe Reader until the problem is solved is probably wise. Updating flash to the latest version 10 is also necessary. FF users can further protect their PCs with NoScript.

Posted by: eMJayy   Posted on: 05/19/09 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Using Red Hat Enterprise Linux AS to Achieve Highly Available, Load-Balanced Clusters Dell The Red Hat Enterprise Linux AS operating system integrates Cluster ... Download Now