| Home : December 09 2013 Computer News : Data-stealing malware pretends to be Microsoft IIS server module |
|
Data-stealing malware pretends to be Microsoft IIS server module |
December 09, 2013
Trustwave’s SpiderLabs researchers have found a piece of malware that collects data entered into Web-based forms, pretending to be a module for Microsoft’s Internet Information Services (IIS) web-hosting software.The malware, which is dubbed “ISN,” hasn’t been widely seen, but its characteristics are interesting, wrote Josh Grunzweig, a Trustwave malware researcher, on a company blog.ISN is a malicious DLL (dynamic link library), which is installed as a module for IIS, Grunzweig wrote. ISN’s installer contains four versions of the DLL, one of which is served up depending on whether a victim uses the 32- or 64-bit version of IIS6 or IIS7+.”This module is of particular concern as it is currently undetectable by almost all anti-virus products,” Grunzweig wrote.To read this article in full or to leave a comment, please click here
Link: http://www.pcworld.com/article/2071180/datastealing-malware-pretends-to-be-microsoft-iis-server-module.html#tk.rss_all
|
|
|
|
|
