Re: Targeted Trojan attacks on the rise

Would, I wonder, the risks be mitigated were one to login to a limited user account?

Similarly so for the PowerPoint proof of concept vulnerability?

I wonder if these exploits are based on an apparent user practice to run programs from an administrator login?

I understand that running stuff from a limited user account affords extra security to the user by limiting a range of stuff that programs can access.

Maybe it is more a matter of unsavvy use?



imhotep wrote:
Targeted Trojan attacks on the rise
Robert Lemos, SecurityFocus 2006-10-13
"MONTRÉAL - On December 1, 2005, two e-mail messages were sent from a
computer in Western Australia to members of two different human rights
organizations. Each e-mail message carried a Microsoft Word document with a
previously unknown exploit that would take control of the targeted person's
computer and open up a beachhead into the group's network."

http://www.securityfocus.com/news/11418?ref=rss

Imhotep
.