This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies.  > Find out more here

 
All the latest UK technology news, reviews and analysis

Attackers target Adobe flaw as wait for patch continues

by Shaun Nichols
10 Dec 2011
View Comments
  • Tweet this

Malware writers are continuing to exploit a high-profile zero-day flaw in Adobe Acrobat and Reader, using a spam attack to spread the remote code execution vulnerability in the wild.

The attack arrives as an unsolicited financial report claiming to be from Barclay's Capital, according to security firm Sophos.

The attached PDF file launches the Reader and Acrobat attack, and specially crafted code within the file targets the vulnerability and attempts to download malware-serving Trojans.

"We have started seeing a small number of targeted samples in Sophos Labs of attackers trying to use this vulnerability in email attachments. The emails are well crafted and look very believable," Sophos senior security advisor Chester Wisniewski said in a blog post.

Adobe has been working to address the flaw with an out-of-cycle security fix scheduled to arrive some time in the coming week.

Microsoft is also scheduled to release its monthly security update in the coming days. The 13 December update is slated to deliver 14 bulletins covering 20 security flaws in Windows, Office and Internet Explorer.

Do you agree
blog comments powered by Disqus
Poll

Apple iOS 7 redesign poll

Will you be updating your iPhone to the new version of the operating system unveiled by Apple?
17%
2%
6%
2%
73%

Popular Threads

Powered by Disqus
HTC One vs Apple iPhone 5 head to head review

iPhone 5 v HTC One head to head video review

V3 pits top devices against one another ahead of Samsung Galaxy S4 launch

Updating your subscription status Loading
Connect with V3.co.uk

Sign up to our daily or weekly newsletters

newsletter sign-up button
mimecast

Postini migration – 5 easy steps

The clock is ticking for Postini users that don't want to move their email management to Google Apps.

acquia

How to keep up with the speed of the web through open source

Build great digital experiences at the speed of the web

Project Manager- Cross Asset- Investment Banking

Project Manager with good business analysis skills- Cross...

Business Analyst- Credit Risk- Investment Banking

Business Analyst- Credit Risk- Investment Bank My client...

Technical Project Lead -

Technical Project Lead - Support and facilitate the...

.NET developer

.NET developer Working for a specialist international...
To send to more than one email address, simply separate each address with a comma.