Home Malware Programs Trojans BKDR_MECIV.LIN

BKDR_MECIV.LIN

Posted: March 1, 2012

Threat Metric

Threat Level: 2/10
Infected PCs: 95
First Seen: March 1, 2012
OS(es) Affected: Windows

BKDR_MECIV.LIN is a backdoor Trojan which is a component of a spam campaign that points to Tibetan activists. The spam email covers the story of the NBA star Jeremy Lin, whose excellent play for the New York Knicks has drawn worldwide attention. Just a while ago he made the front cover of Time magazine with the short headline 'Linsanity'. BKDR_MECIV.LIN is dropped on the affected computer by another Trojan infection called TROJ_ARTIEF.LIN, which is a malicious document named 'The incredible story of Jeremy Lin the NBA new superstar.doc' included in a fake email that was sent on February 16th 2012. TROJ_ARTIEF.LIN exploits a vulnerability in Microsoft Office (RTF Stack Buffer Overflow Vulnerability (CVE-2010-3333)) in order to drop BKDR_MECIV.LIN on the affected PC user's computer system. BKDR_MECIV.LIN is specifically created to enable attackers gain remote access and control over infected computer systems. BKDR_MECIV.LIN is either installed accidentally by unaware PC users or deliberately by attackers. BKDR_MECIV.LIN can modify system settings to automatically run each time you start your PC. Uninstall BKDR_MECIV.LIN immediately after detection.

Loading...