From ZDNet: Embedded PDF executable hack goes live in Zeus malware attacks
The identity thieves behind the Zeus malware attacks are now using the “/launch” command feature in Adobe Reader to launch malicious attacks without exploiting a vulnerability in the software.
Be careful what PDFs you are opening. Adobe Reader is being exploited to install Malware meant to steal information from your computer.
Turn this off if you use Adobe Reader…
Users can also turn off this functionality in the Adobe Reader and Adobe Acrobat Preferences by selecting > Edit > Preferences > Categories > Trust Manager > PDF File Attachments and clearing (unchecking) the box “Allow opening of non-PDF file attachments with external applications”
Tags: Reader Beware
Chris wrote,
Thanks for the heads up. I don’t have Reader installed on any of my personal machines, but I just turned it off at work and gave the desktop jockeys a heads up.
Link | April 19th, 2010 at 12:32 pm
TeddyPig wrote,
Honestly Adobe needs to be shut down. Allowing Adobe Reader to execute embedded and attached programs from within a PDF is unbelievable. This thinking is exactly why Flash is a security mess to begin with and now they have destroyed all security acceptance of Adobe Reader and Acrobat.
Link | April 19th, 2010 at 12:35 pm
Erotic Horizon wrote,
Thank you for this info – I read alot of PDF files at home…
I have also given my support team the heads up at well….
E.H>
Link | April 19th, 2010 at 6:48 pm
Stumbling Over Chaos :: These are a few of my linkity things (well, ok, more than a few) wrote,
[...] If you use Adobe Reader, be warned that you should change a setting to avoid a new malware threat. [...]
Link | April 21st, 2010 at 11:53 pm
Miranda wrote,
Thanks so much for this update. I read all of my ebooks at home on my laptop with Adobe—so this is a very important heads up for me.
Link | April 22nd, 2010 at 12:09 pm
eggs wrote,
Another thanks for posting this. I open dozens of pdfs every day and had no idea this problem even existed.
Link | April 24th, 2010 at 3:11 am