Nefarious list processing: viruses vs AutoCAD

Jakub Kaminski Microsoft
Raymond Roberts Microsoft

It's been 12 years since the first virus targeting AutoCAD appeared - more a proof of concept than a serious threat, but it started a trend that continues today. AutoCAD is a popular CAD (Computer Aided Design) software application, which is used across a broad range of design fields.

AutoCAD's users are a homogeneous and growing group that uses specialized software to solve complex design issues. The AutoCAD community is very active, and many forums are dedicated to sharing users' experience and knowledge. What's important from a security point of view is that users exchange not only practical tips, but also code.

Taking these factors into account, and the potential loss of intellectual property and productivity, this paper examines the current state of AutoCAD malware. Our examination includes prevalence data, automation mechanisms (for example the auto-load feature), scripting languages available to AutoCAD users, and file formats supported. We also look at the history and classification of different AutoCAD malware, the changes these families have undergone as they evolved, the various methods and techniques used by the malware to perform their tasks, as well as the challenges associated with providing protection against these types of threats.

 del.icio.us  digg this! digg this

Quick Links

Poll
Should software vendors extend support for their products on Windows XP beyond the end-of-life of the operating system?
Yes - it keeps their users secure
No - it encourages users to continue to use a less secure OS
I don't know
Leave a comment
View 24 comments

VB2014 sidebar

Virus Bulletin
In this month's magazine:
  • VBSpam comparative review March 2014
  • VB100 comparative review on Ubuntu Server 12.04LTS
  • The shape of things to come
  • Threat intelligence sharing: tying one hand behind our backs
  • The curse of Necurs, part 1
  • More fast or more dirty?
  • Tofsee botnet
  • Back to VBA
  • Is the security industry up to the new challenges to come?
  • Greetz from academe: No place to Hyde
Virus Bulletin 04 2014
Subscribe now!

Virus Bulletin currently has 231,353 registered users.