Well-honed attacks sneak under the radar
Targeted attacks often send a carefully constructed e-mail to one or a handful of specifically chosen targets

Samples of documents used in carefully prepared targeted attacks make clear that while a suspicious eye is a great security tool, some especially dangerous attacks might slide right by you.

Targeted attacks often send a carefully constructed e-mail to one or a handful of specifically chosen targets. The messages are well-written, and don't contain the tell-tale typos and errors that often accompany malware campaigns. They're far more rare, and far more dangerous, than the average attack.

The seven 'bait file' samples posted by F-Secure "have been used to infect specific individuals in different organizations in order to gain access to their computer," the company writes,and all contained exploits that would install remote-control malware on a victim PC.

But of the five I can read (one appears to be in Russian, another German), only one would immediately trigger my own warning bells. If I opened any of the other .pdf or .doc files I probably wouldn't notice anything amiss.

The good news is that even if one of these sneaky little buggers crept past you, they'd likely hit a brick wall if your software was up-to-date. Unless a targeted attack goes after an unpatched zero-day software flaw (which unfortunately does happen), its exploit payload would fizzle out if you've patched the flaw it looks for. So keep clicking yes to those automatic update notices, and fire up that Secunia PSI.

More about F-Secure, PSI
Recommend this article?
Yes0 votes
No0 votes

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Enter the fully qualified URL, eg. http://www.example.com/
Users posting comments agree to the PC World comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Syndicate content Syndicate content Syndicate content
 
Gift Guide
MWave
Samsung

CXO Latest

LED Advisor
 

Colour your world with Samsung

A chance to win with every
Samsung Consumable purchase*