More news about MS08-067

Today we got our hands on one of the first malware files (a Trojan) pushed successfully through the Microsoft vulnerability (MS08-067).

It’s an information stealer trojan which silently connects to different servers.

How bad is this going to be? Well, if users are not applying the patch they are at risk of letting unauthorised code execute, such as this information stealing Trojan.

Jerome Segura