View source for The tigger trojan: icky, sticky stuff

{{Publication
|Link=http://voices.washingtonpost.com/securityfix/2009/02/the_t-i-double-guh-r_trojan_ic.html voices.washingtonpost.com
|Author=Brian Krebs
|NomRevue=Security Fix
|Date=24 février 2009
|Editor=Washington Post
|Year=2009
|Botnet=Tigger
|Abstract=iDefense analyst Michael Ligh found that Tigger appears designed to target mainly customers or employees of stock and options trading firms. Among the unusually short list of institutions specifically targeted by Tigger are E-Trade, ING Direct ShareBuilder, Vanguard, Options XPress, TD Ameritrade and Scottrade.

iDefense said the Trojan is the first known malware to exploit a specific vulnerability Microsoft patched in mid-October 2008. That flaw is what's known as a "privilege escalation" vulnerability, in that it cannot be exploited remotely, and merely allows the attacker to gain access to the almighty "administrator" account in Windows.
}}