WM/Wazzu.A

description-logoAnalysis

  • Viral consists of a single macro and is infectious in the Word6/7 environment
  • Virus hooks the Word event handler which prevents the opening of infected documents
  • Virus uses a randomize instruction to pick a number between .01 and .99 -
    • if the number is less than .25, virus may insert the word "wazzu" at a random location within the document
    • if the number is less than .20, virus may move a single word to a different position within the document

recommended-action-logoRecommended Action

Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR