Block, SkipCaptcha, Upload, Automoderated users, Check users, delete, edit, Moderators, move, oversight, protect, ratelimit-exempt, rollback
19,965
edits
Changes
Jump to navigation
Jump to search
created page
'''DuQu''' is [[computer]] [[malware]] classified as a Trojan Horse. It is built with the same basic source code of [[Stuxnet]], so it has been concluded that this malware was designed and released by the same party responsible for Stuxnet. Some are even refering to DuQu as Stuxnet 2.0<ref>http://www.pcworld.com/article/242114/duqu_new_malware_is_stuxnet_2.html</ref> In general, this Trojan Horse was designed for intelligence gathering and espionage.<ref>http://www.kaspersky.com/about/press/major_malware_outbreaks/duqu</ref>
==Technical Specifics==
Duqu is often delivered as a [[Microsoft]] [[Word]] document. Once opened, it exploits what was at the time of release a 0-day vulnerability (that is, one which was completely unknown) in font handling. Once a computer is infected, it opens a "back door" and begins downloading the main content of the malware. It also has rootkit functionality, so it can run nearly invisibly on the host computer.<ref>https://www.symantec.com/security_response/writeup.jsp?docid=2011-101814-1119-99</ref><ref>https://securelist.com/blog/incidents/32463/duqu-faq-33</ref>
===Vulnerable [[Operating system|Operating System]]s===
*Windows NT
*Windows 95
*[[Windows 98]]
*[[Windows 2000]]
*Windows Me
*Windows Server 2003
*[[Windows XP]]
*Windows Server 2008
*[[Vista (operating system)|Windows Vista]]
*[[Windows 7]]<ref>https://www.symantec.com/security_response/writeup.jsp?docid=2011-101814-1119-99</ref>
==References==
{{reflist}}
[[category:Malware]]
==Technical Specifics==
Duqu is often delivered as a [[Microsoft]] [[Word]] document. Once opened, it exploits what was at the time of release a 0-day vulnerability (that is, one which was completely unknown) in font handling. Once a computer is infected, it opens a "back door" and begins downloading the main content of the malware. It also has rootkit functionality, so it can run nearly invisibly on the host computer.<ref>https://www.symantec.com/security_response/writeup.jsp?docid=2011-101814-1119-99</ref><ref>https://securelist.com/blog/incidents/32463/duqu-faq-33</ref>
===Vulnerable [[Operating system|Operating System]]s===
*Windows NT
*Windows 95
*[[Windows 98]]
*[[Windows 2000]]
*Windows Me
*Windows Server 2003
*[[Windows XP]]
*Windows Server 2008
*[[Vista (operating system)|Windows Vista]]
*[[Windows 7]]<ref>https://www.symantec.com/security_response/writeup.jsp?docid=2011-101814-1119-99</ref>
==References==
{{reflist}}
[[category:Malware]]