| Kasuagi |
01-27-2002 12:07 AM |
new website based trojan...
Quote:
The Microsoft virtual machine (Microsoft VM) includes a security vulnerability that may allow script code in a Web page or HTML-based e-mail message access to ActiveX controls that should not be available in those contexts. This vulnerability can give malicious script code access to any ActiveX controls that are installed on the visiting user's computer. The ActiveX controls could then give the malicious script complete control over the visiting user's computer, including the ability to read and write files on the local hard drive.
|
okay, i got this data from the microsoft website. if anyone on Graal PMs you a site or link for ANYTHING, don't click it or just try disabling ActiveX in your IE settings
this is how the trojan works...
the person using the exploit will backdoor a trainer with a pws that steals all the graal reg keys and PM the "link" and then it upload all the info to a txt file on their FTP server. they most likely wrote a program to sort all of the keys and decrypt them
you've been warned, just be cautionous of what sites you visit. just thought you guys would want to know, i fell for it |
