Gtron Solutions, LLC

Malicious XLS attachments have been found in emails that supposedly contain information about this summer's Olympic Games in Beijing.  The trojan even goes as far as to leave behind a non-malicious Excel file after it has opened a backdoor so the user does not realize anything has happened.

A patch for the vulnerability was written last February, but Microsoft withdrew it before last month's Patch Tuesday.  The flaw has been known of since January, so cyber-criminals have had a full two months to exploit this vulnerability.  Tomorrow's Patch Tuesday will address this flaw.

Always a good line of thought, Virus Bulletin has suggested that users be cautious of opening unsolicited emails and even more careful of attachments.

REFERENCES:

Virus Bulletin

'Olympic' emails contain malicious XLS attachments