Win32/Hydraq
What is it?
Hydraq is a family of malware used in the recent highly sophisticated, coordinated attacks against corporate networks, including Google. The hack-attack components are zero-day in Internet Explorer with shellcode that installs a backdoor on the target system.How does it work?
Remote attackers can gain full control of the affected system. Theoretically, it can perform anything, and this includes stealing information, execute programs and applications, and watch the user's desktop in real-time.
Should I be worried?
No, if you have applied the MS10-002 vulnerability patch or your anti-malware product detects it. If you haven't, you should be very worried.
How can I prevent it?
Anti-malware software should be running, updated, and you should have recently done a full scan. Always use a software firewall, which will stop many of the attacks. And, make sure your Internet Explorer browser has the latest update.
– Brian Grayek, VP, product management, CA
