IT security, vunerabilities, bugs, fixes, flaws, RSA conference and Infosec.
A blog from V3.co.uk

« Financial services firms found wanting on security | Main | Virtual machines being used to obfuscate malware »

Adobe Reader now targeted more than Microsoft

The percentage of targeted attacks exploiting vulnerabilities in Adobe Reader is growing at a significant rate, outstripping Microsoft Word, Excel and PowerPoint, according to the latest figures from security firm F-Secure.

In a new blog posting, the firm urged users to patch a critical vulnerability in the popular software which was discovered last month and is being actively exploited in the wild.

"Our sample was submitted by a European financial organisation and the file name includes a reference to the G20," the blog posting explained.

"The exploit drops a downloader and attempts to make a connection to tiantian.ninth.biz. We detect this attack as Exploit:W32/PDFExploit.G. It doesn't surprise us to see this Adobe Reader vulnerability utilised so quickly."

According to F-Secure's research, targeted attacks exploiting Adobe Reader grew from around 49 per cent last year to over 60 per cent in the first two months of this year.

By comparison, Microsoft Word accounted for around 39 per cent of targeted attacks so far this year, slightly up from 34 per cent in 2009. Excel and PowerPoint attacks stood at around seven per cent.

March 10, 2010 |

Comments

Post a comment







Site credentials: About | Privacy policy | Terms & conditions | Top of the page
© Incisive Media Investments Limited 2010, Published by Incisive Financial Publishing Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, are companies registered in England and Wales with company registration numbers 04252091 & 04252093