All the latest UK technology news, reviews and analysis

Experts warn of new PDF attacks

by Shaun Nichols

More from this author

26 Sep 2008

Be the first to comment

  • Tweet this
Hacking
Experts are warning of new threats of PDF-based attacks

Security organisations are warning users to be vigilant following the discovery of a new crop of tools for exploited PDF flaws.

The US Computer Emergency Response Team (US-Cert) and Secure Computing issued alerts after several exploit tools were found to be making the rounds in the cyber-crime underworld.

The toolkits are especially dangerous due to their ability to avoid security systems, according to Secure Computing.

The latest attacks catalogue infected users and refrain from sending attacks more than once, making it more difficult for security vendors to track down the source of the attacks and prevent further infections.

In addition to new tools, researchers have also found PDF exploit components being added on to existing attack systems.

The risk is further compounded by the fact that PDF files are commonly found among the home and enterprise worlds and are not always considered to be as risky as other formats by many users.

"The Portable Document Format is one of the file formats of choice commonly used in today's enterprises, since it is widely deployed across different operating systems," the company noted.

"But on a down-side this format has known vulnerabilities which are exploited in the wild."

US-Cert recommends that users protect against the attacks by avoiding untrusted or unsolicited downloads and email attachments.

The organisation also recommends that users keep antivirus and system software up-to-date with the latest patches.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

IT priorities for 2012

What is the most important IT priority for your company this year?

99%

0%

1%

0%

0%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Accurev

Top 5 software development challenges

This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes

Talend

Rubbish in, rubbish enterprise

Why good data management at all levels is essential in the modern business (video, 6mins)

JavaScript Developer – central London

JavaScript / HTML5 Developers required to join a hugely...

Embedded Software Engineer – central London

Embedded Engineers with experience of developing consumer...

ASP.NET, C#, VB - SENIOR DEVELOPER, LUTON, BEDFORDSHIRE

ASP.NET, C#, VB - SENIOR DEVELOPER, LUTON, BEDFORDSHIRE...

To send to more than one email address, simply separate each address with a comma.