Hackers update malware tool

September 2007

Hackers update malware tool kit, add first zero-day attack code. A new version of the IcePack hacker exploit tool kit has been released, security researchers warned today, and for the first time it includes attack code designed to exploit an unpatched, or zero-day, Microsoft vulnerability. Three of IcePack's eight exploit tools are new, said the chief technology officer at Exploit Prevention Labs Inc. That alone is noteworthy, he said. “The mix of old and new exploits is to be expected, but three new ones in one update is pretty impressive,” he noted. But the new tool kit also sports a first. "The latest iteration has done something original,” he said, pointing to an exploit that attacks a zero-day vulnerability in Microsoft's DirectX software development kit (SDK). “The closest to a tool-kit zero-day exploit [before] was for the ANI [animated cursor] vulnerability,” he said, referring to a Windows bug that surfaced in early April.