WM/Wazzu.A
Analysis
- Viral consists of a single macro and is infectious
in the Word6/7 environment
- Virus hooks the Word event handler which prevents
the opening of infected documents
- Virus uses a randomize instruction to pick a number
between .01 and .99 -
- if the number is less than .25, virus may insert
the word "wazzu" at a random location
within the document
- if the number is less than .20, virus may move a single word to a different position within the document
- if the number is less than .25, virus may insert
the word "wazzu" at a random location
within the document
Recommended Action
Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option
Telemetry
Detection Availability
FortiClient | |
---|---|
Extreme | |
FortiMail | |
Extreme | |
FortiSandbox | |
Extreme | |
FortiWeb | |
Extreme | |
Web Application Firewall | |
Extreme | |
FortiIsolator | |
Extreme | |
FortiDeceptor | |
Extreme | |
FortiEDR |