Eagle Software Inc.

***Powerful malware for espionage discovered by Kaspersky***

After Stuxnet and Duqu, Kaspersky Labs have unearthed a new malware with similar function, much greater complexity and sophistication. Dubbed ‘The Flame’, this malware was discovered when the UN’s International Telecommunication Union contacted the lab to investigate an unknown piece of code which was deleting sensitive information across the Middle East.

When Kaspersky made its finding public on Monday, they declared that Flame was the “most complex threats ever discovered” which redefines cyber-warfare and espionage. Flame has been described by the Kaspersky as a sophisticated attack toolkit that propagates through network or removable media. The malware’s functions include sniffing packets on the network, taking screenshots, logging keystrokes and even record conversation using a computer’s built-in microphone when available.

Flame’s high-order logic has been written in Lua scripting language, while the subroutines and libraries that do the actual dirty-work have been complied using C++. It also has libraries for compressions, database manipulation, and even a Lua virtual machine.

This puts the entire package’s size at unusually large 20 megabytes, with just the Lua portion of the code running into 3000 lines. Kasperky’s also believe that Flame’s modular nature has been used to update the malware, and as such there may be multiple version of Flame floating around.

The malware is most active in Iran, the Middle East and some parts of Northeast Africa. Using historical data and using the process of elimination, Kaspersky seems to be fairly confident that Flame is a state-developed malware.

Eagle Software Inc.

****Know More About Trojans and Backdoors****

A Trojan horse is an unauthorized program contained within a legitimate program. This unauthorized program performs functions unknown (and probably unwanted) by the user.

It is a legitimate program that has been altered by the placement of unauthorized code within it; this code performs functions unknown (and probably unwanted) by the user.
Any program that appears to perform a desirable and necessary function but that (because of unauthorized code within it that is unknown to the user) performs functions unknown (and definitely unwanted) by the user.

How Trojan Work?

Attacker gets access to the trojaned system as the system goes online
By way of the access provided by the trojan attacker can stage attacks of different types.


**Various Trojan Types:

Remote Access Trojans
Password Sending Trojans
Keyloggers
Destructive
Denial Of Service (DoS) Attack Trojans
Proxy/Wingate Trojans
FTP Trojans
Software Detection Killers

**Modes of Transmission:

Attachments
Physical Access
Browser And E-mail Software Bugs
NetBIOS (File Sharing)
Fake Programs
Un-trusted Sites And Freeware Software

**Backdoor Countermeasures

1- Most commercial ant-virus products can automatically scan and detect backdoor programs before they can cause damage (Eg. before accessing a floppy, running exe or downloading mail).

2- Educate your users not to install applications downloaded from the internet and e-mail attachments.

Copyright 2012 - Eagle Software Inc.

***Update available for Eagle Web Browser Pro***

Update Version 4.1
Recently changed in this version:

- New / Update icons
- Improved Performance
- (Fix) History Viewer
- Various bug fixes

http://eaglesoftware.weebly.com/downloads.html

Eagle Software Inc.

Downloads - Eagle Software Eagle Web Brower Pro - Free Download