DuQu (malware)
DuQu is computer malware classified as a Trojan Horse. It is built with the same basic source code of Stuxnet, so it has been concluded that this malware was designed and released by the same party responsible for Stuxnet. Some are even refering to DuQu as Stuxnet 2.0[1] In general, this Trojan Horse was designed for intelligence gathering and espionage.[2]
Technical Specifics
Duqu is often delivered as a Microsoft Word document. Once opened, it exploits what was at the time of release a 0-day vulnerability (that is, one which was completely unknown) in font handling. Once a computer is infected, it opens a "back door" and begins downloading the main content of the malware. It also has rootkit functionality, so it can run nearly invisibly on the host computer.[3][4]
Vulnerable Operating Systems
- Windows NT
- Windows 95
- Windows 98
- Windows 2000
- Windows Me
- Windows Server 2003
- Windows XP
- Windows Server 2008
- Windows Vista
- Windows 7[5]
References
- â http://www.pcworld.com/article/242114/duqu_new_malware_is_stuxnet_2.html
- â http://www.kaspersky.com/about/press/major_malware_outbreaks/duqu
- â https://www.symantec.com/security_response/writeup.jsp?docid=2011-101814-1119-99
- â https://securelist.com/blog/incidents/32463/duqu-faq-33
- â https://www.symantec.com/security_response/writeup.jsp?docid=2011-101814-1119-99