Multiple Malware, One Exploit: How HTML_SHELLCOD.SM Operates
It is inevitable for vulnerabilities that can be exploited in commercial software to exist.
The reasons for this are innumerable and may range from faulty code to operational conflicts with other commercial software. Vulnerabilities, especially zero-day vulnerabilities, are particularly dangerous due to the potential havoc they can wreak upon unsuspecting, unprotected users. These allow cyber criminals to send commands to an infected system, pushing it to perform unauthorized actions.
It then follows that eagle-eyed cybercriminals looking to further their malicious money-making machinations will seek to exploit all of the vulnerabilities present in the most efficient way possible.
HTML_SHELLCOD.SM, a recently discovered malware that took advantage of a certain vulnerability in Internet Explorer (IE), is a prime example of this in motion. We detect all files targeting the said IE vulnerability as HTML_SHELLCOD.SM. It exemplifies how a single vulnerability can be exploited to allow devastating malware payloads to run on a system or network, including stealing sensitive and confidential information.
How does this threat attack users?
Malware nyingi, moja ya matumizi: Jinsi HTML_ShellCode.SM inafanya kazi Ni lazima kwa udhaifu ambao unaweza kutumiwa katika programu ya kibiashara kuwepo. Sababu za hili ni nyingi na inaweza kuanzia code makosa kwa migogoro ya uendeshaji na programu nyingine za kibiashara. Udhaifu, hasa udhaifu wa siku sifuri, ni hatari hasa kutokana na uharibifu unaoweza kusababishwa na watumiaji wasio na shaka, wasiohifadhiwa. Hizi huruhusu wahalifu wa kompyuta kutuma amri kwa mfumo ulioambukizwa, kuushusha kufanya vitendo visivyoidhinishwa. "Kisha inafuata kwamba wahalifu wa mtandao wenye macho ya tai wanaotafuta kuendeleza mashine zao za uharibifu wa fedha watajaribu kutumia udhaifu wote uliopo kwa njia bora zaidi iwezekanavyo. """ HTML-Shellcode (SM) ni programu hasidi iliyogunduliwa hivi karibuni ambayo ilitumia hatari fulani katika Internet Explorer (IE) na kuifanya iwe rahisi kwa watumiaji kuitumia. "Kama vile tulivyoona, faili zote zinazolenga hatari ya IE ni ""HTML_SHELLCOD.""" "Hii ni mfano wa jinsi udhaifu mmoja unaweza kutumiwa kuruhusu ""malipo mabaya"" ya uharibifu kukimbia kwenye mfumo au mtandao, ikiwa ni pamoja na kuiba habari nyeti na za siri." Tisho hili linawashambuliaje watumiaji?