Adobe temporary vulnerability fix

Reposted from mysterious Xiaoqiang & 1943

Recently, a zero-day Adobe Acrobat Reader vulnerability discovered by foreign researchers has become the target of hacker attacks. According to Dr. Shi Xiaohong, a security expert of 360, some specially crafted malicious PDF documents have already appeared on the Internet in the United States and other countries. Once a netizen opens such documents, the computer will automatically run Remote Control-type Ghost Trojans to become "bots" that allow hackers to remotely control ". Since Microsoft and Adobe have not released patches, the 360 security center provides users with temporary solutions.

According to the analysis by 360 security experts, the zero-day vulnerability of Adobe Acrobat Reader affects all versions between 8.1.0 and 9.0.0. It is triggered by the built-in JavaScript function of the software. If you enable Acrobat JavaScript by default, as long as a malicious PDF file is opened, the attacker will launch an alert. The security vendors outside China have issued an alert and named the existing samples TROJ_PIDIEF.IN and Trojan respectively. pidief. e. Since Adobe has not yet revealed the release date of the patch, hackers will inevitably spread the trojan virus in the vacuum period before the vulnerability is fixed. This attack trend is spreading worldwide, 360 security center for this urgent release of temporary repair tools, please download the use of timely (Repair Tool http://down.360safe.com/360pdffix.exe ).

Adobe Acrobat Reader is a very popular office software, which is more common in local networks of enterprises and institutions. The Ghost Trojan function is similar to the well-known "gray pigeon ", in China, it is an important tool for the trojan industry to set up a "botnet". It can steal all kinds of information in computers, steal online banking assets, control cameras, microphones, and other hardware peripherals, it also initiates active attacks against other computers on the network, which poses a great threat to enterprises, institutions, and campus networks. It is reported that some companies that pay special attention to information security have manually disabled the JavaScript function of Adobe Acrobat Reader to avoid attacks.

<