Blast from the future?

SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Blast from the future?
It is 1995 and users are complaining that a weird dialog box is popping up in their word document. The first macro virus was doing the rounds. Fast forward to September 2008 and yes you guessed it new word macro viruses are doing the rounds. They have been updated somewhat. Rather than pop up a little dialog box it is behaving more like the traditional downloaders and the road to pain afterwards. Rechnung.doc has been around for a few days now and detection rates are pretty good, 23/36 (http://www.virustotal.com/analisis/0fc3a70eff0b9ec447794acbda2402e7). So far seems to be mostly Europe. However that is not the only one doing the rounds, Michael passed one along that seems to have fairly bad detect rates, which we've passed on to the AV vendors so detect rates should improve. Mark H - Shearwater.	Mark 391 Posts ISC Handler Sep 12th 2008
Thread locked Subscribe	Sep 12th 2008 1 decade ago