09.01.09
Gemini version available ♊︎
Posted in Microsoft, Security, Windows at 3:41 am by Dr. Roy Schestowitz
Summary: Security-related items from the news (highlights in red are ours)
• Conficker, back with a vengeance as top worm
The infamous Conficker worm first spread its malicious infection across the Internet more than eight years ago and just last month it shot back into prominence, infecting 43 percent of machines in use worldwide in the space of four weeks and, for good measure, it now installs rogue security software on compromised machines.
• Skype snooping trojan detected
“What this threat is doing is actually grabbing the sound coming from the audio devices plugged into the computer,” Selvaraj wrote. “It does this by hooking various Windows API calls that are used in audio input and output.”
• Skype Trojan can log VoIP conversations
Symantec claims to have found the public release of source code for a Trojan that targets Skype users..
Security giant Symantec claims to have found the public release of source code for a Trojan that targets Skype users.
• Microsoft ATL/MFC ActiveX Type Confusion Vulnerability
Remote exploitation of a type confusion vulnerability in Microsoft Corp.’s ATL/MFC ActiveX code as included in various vendors’ ActiveX controls, could allow an attacker to execute arbitrary code within Internet Explorer (IE). Microsoft’s Component Object Model (COM) was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming dilemmas involved in object oriented programming, distributed transactions, and inter-language communications. Microsoft’s Active Template Library (ATL) is a set of C++ templates that simplify developing COM objects.
Related posts:
- Journalists Suggest Banning Windows, Maybe Suing Microsoft Over DDoS Attacks
- When Does it Become Appropriate to Take Windows off the Information Highway?
- Microsoft’s Blame-Shifting Strategy Precedes More Trouble
- Leave Microsoft Alone
- Never Blame Microsoft, Blame Users and Exploits
- Botnets and Bounties Versus Real Security
- Is Windows to Blame for Cracking of Federal Aviation Administration (FAA)?
- Windows Problems Take Down Airplanes, JFK Airport, Houston Municipal Courts
- Turkey, France, United Stated Under Attack by Microsoft Windows Insecurities
- Microsoft Adopts Malware Techniques to Advance .NET
- Windows Botnets Go Out of Control, Obama Web Site Delivers Windows Malware
- One Windows Worm, One Week, and Possibly 250,000,000+ New Windows Zombies
- Death by Microsoft Windows
- UNIX/Linux Offer More Security Than Windows: Evidence
- US Army Becomes Zombies Army; London Hospitals Still Ill (Windows Viruses)
- Eye on Microsoft: Another Messy Week for Security
- Cybercrime Rises and Vista 7 is Already Open to Hijackers
- Vista 7: Broken Apart Before Arrival
- Vista 7 Security “Cannot be Fixed. It’s a Design Problem.”
- Department of Homeland Security ‘Poisoned’ by Microsoft; Vista 7 is Open to Hijackers Again
- Liability for Software When Life is at Stake
- Microsoft Windows Zombies Also Knocked Facebook and Gawker Offline, More “Critical” Microsoft Flaws Discovered
- Bad Day for Twitter: Attack from Microsoft Windows Zombies, Texas Lawsuit Over Software Patents
- Off Topic: A World Where Almost One in Two PCs is a Windows Zombie PC
Share in other sites/networks:
These icons link to social bookmarking sites where readers can share and discover new web pages.
Permalink 
Send this to a friend
ᶃ Gemini Space
Below is a Web proxy. We recommend getting a Gemini client/browser.
This post is also available in Gemini over at this address (requires a Gemini client/browser to open).
✐ Cross-references
Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.
▢ Respond and Discuss
If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.
What Else is New
Links 02/04/2023: GNUnet 0.19.4 and Pine64/RISC-V SoC
Links for the day
Geminispace: Still Growing, Still Community-Controlled
Almost 2.4k live (online) capsules are observed by Lupa right now (there are more, but Lupa cannot see them all), with just 31 more to go before this 2,400 milestone
Microsoft Layoffs in the Buzzwords Department
Microsoft hired or acquired (acquisition-based hiring, which enables faking growth, faking wealth when no actual money changes hands, and sometimes debt-loading) a lot of “trash” and “hype”; now it pays the price
Links 01/04/2023: Bloomberg Places Stake in Free Software, Microsoft Banned and Slammed for Antitrust Abuses
Good news
Links 01/04/2023: Red Hat Turning 30
Links for the day
Links 31/03/2023: Mozilla Turns 25 and OpenMandriva 23.03
Links for the day
IRC Proceedings: Friday, March 31, 2023
IRC logs for Friday, March 31, 2023
Linus Tech (Illiteracy) Tips, LTT, Buys Phoronix Media
Phoronix Media is being acquired by a larger company; the site will not change though
Decided to Quit Debian and Use WSL Instead (Best of Both Worlds)
Today starts a journey to a “better” experience, which lets Microsoft audit the kernel and leverage telemetry to improve my Debian experience
Microsoft Has Laid Off Lennart Poettering and Hired Elon Musk
Poettering gets rehired by IBM; IBM and Microsoft announce merger, putting Poettering back into his former position
Links 31/03/2023: Ruby 3.2.2 and Linux Lite 6.4
Links for the day
Links 31/03/2023: Devices and Games, Mostly Leftovers
Links for the day
IRC Proceedings: Thursday, March 30, 2023
IRC logs for Thursday, March 30, 2023
Links 31/03/2023: Ubuntu 23.04 Beta, Donald Trump Indicted, and Finland’s NATO Bid Progresses
Links for the day
Translating the Lies of António Campinos (EPO)
António Campinos has read a lousy script full of holes and some of the more notorious EPO talking points; we respond below
[Meme] Too Many Fake European Patents? So Start Fake European Courts for Patents.
António Campinos, who sent EPO money to Belarus, insists that the EPO is doing well; nothing could be further from the truth and EPO corruption is actively threatening the EU (or its legitimacy)
Thomas Magenheim-Hörmann in RedaktionsNetzwerk Deutschland About Declining Quality and Declining Validity of European Patents (for EPO and Illegal Kangaroo Courts)
Companies are not celebrating the “production line” culture fostered by EPO management, which is neither qualified for the job nor wants to adhere to the law (it's intentionally inflating a bubble)
Links 30/03/2023: HowTos and Political News
Links for the day
Links 30/03/2023: LibreOffice 7.5.2 and Linux 6.2.9
Links for the day
Links 30/03/2023: WordPress 6.2 “Dolphy” and OpenMandriva ROME 23.03
Links for the day
Sirius is Britain’s Most Respected and Best Established Open Source Business, According to Sirius Itself, So Why Defraud the Staff?
Following today's part about the crimes of Sirius ‘Open Source’ another video seemed to be well overdue (those installments used to be daily); the video above explains to relevance to Techrights and how workers feel about being cheated by a company that presents itself as “Open Source” even to some of the highest and most prestigious public institutions in the UK
IRC Proceedings: Wednesday, March 29, 2023
IRC logs for Wednesday, March 29, 2023
[Meme] Waiting for Standard Life to Deal With Pension Fraud
The crimes of Sirius ‘Open Source’ were concealed with the authoritative name of Standard Life, combined with official papers from Standard Life itself; why does Standard Life drag its heels when questioned about this matter since the start of this year?
Former Staff of Sirius Open Source Responds to Revelations About the Company's Crimes
Crimes committed by the company that I left months ago are coming to light; today we share some reactions from other former staff (without naming anybody)
Among Users in the World's Largest Population, Microsoft is the 1%
A sobering look at India shows that Microsoft lost control of the country (Windows slipped to 16% market share while GNU/Linux grew a lot; Bing is minuscule; Edge fell to 1.01% and now approaches “decimal point” territories)
In One City Alone Microsoft Fired Almost 3,000 Workers This Year (We're Still in March)
You can tell a company isn’t doing well when amid mass layoffs it pays endless money to the media — not to actual workers — in order for this media to go crazy over buzzwords, chaffbots, and other vapourware (as if the company is a market leader and has a future for shareholders to look forward to, even if claims are exaggerated and there’s no business model)
Links 29/03/2023: InfluxDB FDW 2.0.0 and Erosion of Human Rights
Links for the day
Links 29/03/2023: Parted 3.5.28 and Blender 3.5
Links for the day
Links 29/03/2023: New Finnix and EasyOS Kirkstone 5.2
Links for the day
IRC Proceedings: Tuesday, March 28, 2023
IRC logs for Tuesday, March 28, 2023
Content is available under CC-BY-SA