Signature Detail

POP3: .SCT

This signature detects e-mail attachments with the extension .sct received through POP3. This can indicate an incoming e-mail virus. .SCTs (Windows Script Component) contain scripts. Attackers can create malicious scripts, tricking the user into executing the file and infecting the system.

Extended Description

Since .sct files contain script, malware writers can exploit this vulnerability by inserting malicious code. A target system is compromised if an unsuspecting user opens a .sct file. Such a file is usually received by e-mail. The impact on the target system is dependent on the instructions contained in the malicious .sct file.

References

• URL: http://www.cknow.com/vtutor/FileExtensions.html
• URL: http://www.novatone.net/mag/mailsec.htm
• URL: http://support.microsoft.com/?kbid=235309