Fergie's Tech Blog

Researcher: WMF Exploit Sold Underground for $4,000

Ryan Naraine writes on eWeek:

Virus hunters combing through the wreckage of the zero-day WMF (Windows Metafile) attacks have found evidence that exploit code was being peddled by Russian hacker groups for $4,000 a pop.

The first sign of an exploit was traced back to the middle of December 2005, a full two weeks before anti-virus vendors started noticing mysterious WMF files rigged with malicious executable code, says Alexander Gostev, a senior virus analyst at Kaspersky Lab.

"One very important aspect of this case is that the vulnerability was first identified by members of the computer underground," Gostev said.

posted by Fergie @ 2/02/2006 03:21:00 PM