Fergie's Tech Blog

MPack: Nasty Malware Toolkit Making the Rounds

Matt Hines writes on InfoWorld's "Zero Day" Blog:

Security researchers at VeriSign are tracking the emergence of a dangerous malware development kit being sold on the Russian underground that is being used to level many different types of threats at unprotected computers.

Dubbed MPack, the kit -- which is trading hands for roughly $1,000 -- is empowering stealthy malware attacks on Web browser vulnerabilities, and claiming roughly a 50 percent success rate, according to Ken Dunham, senior engineer and director of the Rapid Response Team in VeriSign's iDefense security unit.

Dunham said in an e-mail that MPack is using multiple exploits "in a very controlled manner" to infect vulnerable computers.

More here.

Also, Symantec has put up a nice video of MPack in action here.

posted by Fergie @ 6/22/2007 06:23:00 AM