Symantec, the world known security software maker, has discovered the Duqu virus that uses a security hole found in Microsoft Windows to infect computers and steal data. Experts think that Duqu virus could be the next biggest Cyber threat.
Microsoft already admitted the security issue and in a statement they are assuring that they are working non-stop to release a security update to everyone ASAP.
Duqu virus was first heard back in October by Symantec and they also discover that this virus shares similar code used in the Stuxnet, which was a malicious software targeted to Iran’s nuclear program, but in this case the Duqu virus was built to gather information from agencies and corporations.
It is believed by Symantec that hackers sent Duqu virus to specific victims via emails with a Microsoft Word document attached which installs the malicious software after the file is opened. Once the computer is infected can spread throughout the organization network infrastructure and the attacker can gain control of the system allowing sensitive corporate data to be compromised. Click the image above to learn more how Duqu virus works.
So far Duqu was seen and confirmed in many countries, including India, Iran, Netherlands, Ukraine, Switzerland, Sudan and Vietnam.
As reported by Symantec Corp., at this time there is NOT a workaround other than following best practices, such as not opening unknown received files and using alternative software. The good news is that many security software vendors have already detect and block the main Duqu files, which prevent the attack.