NEWS /

Worm Hits Symantec's Anti-virus Software

17 Dec, 2006, 11:00 am IST | Sharon Khare |

eEye Digital Security, developer of network security and vulnerability management software solutions, has discovered Big Yellow, a non-Microsoft-based malware that has both worm and botnet characteristics and is currently propagating in the wild using Symantec's anti-virus software.

Big Yellow exploits a vulnerability in the remote management interface for versions of Symantec AntiVirus and Symantec Client Security, which could be remotely exploited by an anonymous attacker to execute arbitrary code with SYSTEM privileges on an affected system, giving the attacker complete control.

Many IT departments are not prepared for attacks on non-Microsoft-based applications and have not yet deployed the patch available for this widely deployed anti-virus software.

eEye discovered this vulnerability in late May 2006 and worked with Symantec to create a patch at that time. However, many IT departments have not deployed this patch.

"Given the rapid discovery of critical security vulnerabilities within desktop applications other than Microsoft, the release of malware of this magnitude targeting non-Microsoft software was only a matter of time," said Marc Maiffret, eEye's founder and CTO. "IT urgently needs to understand that the new vector for attack will not come from Microsoft, but from the myriad applications that are scattered throughout its network. From anti-virus to iTunes, these non-Microsoft desktop applications, many of which IT is not even aware of, will become the enterprise's biggest point of vulnerability very, very quickly."

eEye's research team, discovered the Big Yellow malware late on December 14 on its 'honey pot' network — a network designed specifically to identify new classes of attack.

Click here for more info.

Tags: Worm , eEye Digital Security , Microsoft , Symantec , Big Yellow

RELATED STORIES

Malware steals 45,000 Facebook passwords

Malware steals 45,000 Facebook passwords

Security firm, Seculert has issued a warning that a malware, by the name of Ramnit is out on a rampage, affecting ...

You Can Stop Using Your Antivirus Now

Fake Antivirus Worm Roams Twitter

Orkut Attacked By 'Bom Sabado' Worm

New "Here You Have" Worm Delivers Unwanted Gift

Stiletto Worm Spread Via Skype IM

Wikipedia Hijacked to Spread Malware

 

Photos

Mugen Power Galaxy Note Battery Pack

Mugen Power Galaxy Note Battery Pack

30 Jan, 2012, 12:52 PM

3.1

Samsung Galaxy Tab 620

Samsung Galaxy Tab 620

25 Jan, 2012, 01:29 PM

3.1

LG Optimus Black P970

LG Optimus Black P970

24 Jan, 2012, 06:11 PM

3.9

MORE PHOTOS

Leaked Images, Availability, Pricing,
Specs, Pre-order

OPINIONS

Ivor Soans

How time flies. A few weeks ago the BlackBerry world was mad at RIM for a massive 3-day outage. Now,...

MORE OPINIONS

features

Market Watch: Tablets (Feb 2012)

Market Watch: Tablets (Feb 2012)

Tablets have been making rounds for a while now, but it wasn’t until a...

By Roydon Cerejo , Rajesh D'souza

Resident Evil: Operation Raccoon City Interview

Resident Evil: Operation Raccoon City Interview

We sit down and talk to producer Mike Jones who assures us that fans have...

By Avinash Bali

Top smartphones under Rs. 15,000

Top smartphones under Rs. 15,000

The 15K budget has been a sweet deal for those not wanting to spend extra...

By Karan Shah

MORE FEATURES

626 views

926 views

577 views

MORE WALLPAPERS

How To: Install ICS on your Galaxy S

How To: Install ICS on your Galaxy S

10 Feb, 2012, 05:23 AM

On video: MSI WindPad Enjoy 10

On video: MSI WindPad Enjoy 10

09 Feb, 2012, 04:50 AM

On Video: Mercury mTab Neo

On Video: Mercury mTab Neo

08 Feb, 2012, 10:18 AM

2.8

MORE VIDEOS

Close