A new malware has been discovered: it is called “Word13.exe” and is difficult to detect. Here are Symantec’s tips to avoid it.
Add us to your preferred sources.
A new cybersecurity warning has arrived, directly from the labs of the specialized company Symantec.
During routine research activities, technicians have discovered a new malware, named “Word13.exe“.
Hard to detect at first glance by a regular user: this virus may appear, at first sight, to be a common Adobe file type.
Not only that: Symantec noticed that to avoid easy detection, this malware was programmed to display a certification, but a fake one.
After careful analysis, the staff working on Word13.exe noted that the CA Root certificate of origin is not trustworthy.
Therefore, it can be concluded that Word13.exe is a Backdoor Trojan: once it enters your PC, it automatically launches a backdoor function.
This is possible because it is a self-executing element.
What can Word13.exe and, more generally, malware of this type, entail?
Symantec lists the actions that can be activated by a backdoor trojan:
- it can steal user information, including from Skype;
- it can execute files;
- it can create files;
- it can delete files;
- it can create folders;
- it can capture screenshots;
- it can move files;
- it can search for files;
- it can execute files;
- it can emulate mouse functions;
What to do then to avoid the threat of Word13.exe?
Symantec recommends performing periodic antivirus updates, first and foremost.
Then, it is advisable to check the URL of the proposed download and to examine the certificate and signature of the item to be downloaded.
Be the first to comment