We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,258 News Articles

Hackers continue to exploit Adobe Reader flaw

Sample attack missed by most antiviruses

Hackers are once again using the zero-day hole in Adobe Reader and Acrobat to install a remote-control Trojan on victim machines.

The attacks start with a malicious .pdf that the Internet Storm Center has analysed in depth. The ISC is a volunteer organisation that tracks internet attacks.

"Malicious PDF documents are not rare these days," said an ISC spokesperson, adding that attacks typically attach them to emails. But targeted attacks only sent to a small number of victims are often missed by security programs, and the attack sample sent to the ISC was initially detected by only six out of 40 antivirus vendors.

This particular attack attempts to install the PoisonIvy Trojan, which allows an attacker to gain remote control over an infected PC.

It also drops off a harmless .pdf file named baby.pdf and then opens it with Reader, a bit of digital sleight-of-hand intended to disguise the attack.

Adobe criticised

The Adobe flaw has been under attack since it was disclosed last month.

In its security bulletin, Adobe notes that for some combinations of Windows and Reader versions, this security hole will only allow for crashing Reader instead of installing malware.

In the bulletin, Adobe says it will release an update on January 12, but until then the ISC suggests disabling Javascript in Reader and Acrobat (instructions in the bulletin).

Using an alternate .pdf reader such as Foxit should also help mitigate the threat.

Broadband speed test

PC security advice

See also: Adobe to surpass Office as biggest hacker target

IDG UK Sites

The best iPhone 6 alternatives: Price and specs compared with the best smartphones

IDG UK Sites

The top 10 Apple products ranked by pixel density: Which Apple devices have the sharpest screens?

IDG UK Sites

SBTRKT's Look Away webcam-based interactive music video won't keep your gaze

IDG UK Sites

Retina MacBook Air release date rumours and specs: Gold 12in Retina MacBook Air almost 1cm thinner...