RSS is the next target of the virus

Security research firm Trend Micro said that RSS (Really Simple Syndication) technology would be a powerful attack target for future attacks by computer worms.

David Sancho, Trend Micro's senior security researcher, warns that attacking RSS channels will become popular once Microsoft officially releases Internet Explorer 7 - a new browser. with built-in RSS support feature.

In a white paper titled 'The Future of Computer Worms,' Sancho writes the release of IE 7 will open up some interesting possibilities for computer and worm programmers.

'The simplest way to take advantage of the popularity of RSSs is to hijack the news crawlers through existing RSS channels to serve the download of new variants of viruses and types. Other dangerous code installed on the user's computer. This is completely possible only by directing configured client RSS applications to dangerous content websites. '

'This attack is done by checking whether the systems that have the client RSS application installed are configured to automatically download. If allowed to download automatically, the attacker only needs to add or change an RSS channel directed to a malicious malicious website. '

Sancho predicts that attack on RSS channels will be considered as a passive download point (passive download point) to help attackers easily bypass personal firewall applications or other security barriers.

'The download process will continue to work even if the infected virus has been detected. To get rid of this situation, users need a tool to detect and remove malicious profiles in the client RSS application. '

Therefore, this security researcher advises companies to consider deploying the use of HTTP traffic measures (HTTP traffic). For IT administrators, experts say it is time to deploy hardwares and hardwares to combat computer worm attacks.

Meanwhile, the authors of the viruses are looking for ways to spread their virus as quickly as possible and exploit security errors as quickly as possible.

Sancho also predicts that attacking with dangerous scripts that automatically execute will become a new attack technique in virus attacks.