Exploit Toolkit Evilgrade Exploiting Vulnerability in Several Applications

According to Francisco Amato, Researcher at Infobyte, an Internet security company, a new exploit toolkit called Evilgrade enables attackers to plant malware on users' computers that run Mac OS X, iTunes, WinZip or any other popular program, as reported by WHIR on July 28, 2008.

Amato further disclosed that Evilgrade exploits flaws in the default upgrade functionality of any malware-infested operating software or other similarly infected application. However, this attack can be effective only by first carrying out "a man-in-the-middle" attack, in which a hacker places himself between the user's PC and a reliable site to launch original attack. But the Evilgrade attack is now becoming more popular in the presence of...

» SPAMfighter News - 12-08-2008