Friday, April 14, 2006

POC MS Publisher virus found called Avarta.

The first virus which infects Microsoft Publisher (*.pub) documents has been found. It's called Avarta. Due to its crude replication method and obvious payload, Avarta has zero chances of getting in the wild. Some years ago, this might have been an interesting piece of malware. But now macroviruses are virtually extinct, making Avarta proof of concept for something that will never become a threat. A lot of POC's these days but without real danger. Viruswriters are getting behind maybe...