Tigger Trojan Keeps Security Researchers Hopping

[Peaches]

Tigger' Trojan Keeps Security Researchers Hopping

Unusual characteristics may make new malware tough to stop, experts say

Mar 04, 2009 | 05:18 PM

By Tim Wilson

DarkReading

It's malware that actually removes other malware from its victims' PCs. And so far, nobody is exactly sure how it's being distributed.

Security experts this week are buzzing about a new Trojan called Tigger.A, also known as Syzor. The data-stealing malware has quietly claimed about 250,000 victims since it was first spotted by security intelligence company iDefense in November, according to a Washington Post report.

Tigger.A allows attackers to gain access to "administrator" privileges on Windows machines, even if the user himself doesn't ave those privileges, according to the report. It takes advantage of a vulnerability (MS08-066) in Windows'' "privilege escalation" feature that Microsoft revealed -- and patched -- in October.

http://www.darkreading.com/security/attack...ttacks/breaches