Happy Valentine’s Day all ….

Trojan Horse Program increasingly rampant. Trojan horse has been stolen passwords and infect hundreds of thousands of computers, including more than 14,000 hotel that has been stolen information access. Trojans are waiting to work with system administrators to log on to a PC that is infected, then use a Microsoft administration tool to spread their malicious software throughout the existing network.

Unfinished cases, now appeared more new Trojan called Trojan Coreflood. The man behind the Coreflood Trojan has used a software to steal data important data such as bank records and account username and password. This opinion was expressed by Joe Stewart, director of malware research at security vendor Secure Works Inc..

Since Microsoft released Windows XP Service Pack 2, which has a security lock feature, has given a long enough time for a hacker to discover how to spread malicious software to the corporate network. However, Trojan Coreflood hackers have been successful in working in the distribution of these Trojans, partly because of Microsoft’s program called “PsExec” in Windows XP SP2. PsExec program written by Microsoft was used to help system administrators run legitimate software on computers across corporate networks.

For extensive infection, hacker trojan Coreflood to disrupt the system in a first network to trick the user to allow users to download their program. Then, when the system administrator logs on to a desktop computer, for example for routine maintenance, hackers then try to run PsExec and install malware on all computers in a network system with a hacker’s program. Techniques of hackers proved successful run.
Coreflood Trojan has infected more than 378,000 computer users in 16 months. SecureWorks has counted thousands of infections in Coreflood Trojan university networks and financial companies, hospitals, law firms, and local police, especially in the U.S. According to SecureWorks, Coreflood, also known as Trojan AFcore, there have been about six years ago, and has been used in the past to perform DoS attacks (Denial-of-Service), but not to steal corporate passwords in the system.

Other Article :

No related posts.