10.05.10

Gemini version available ♊︎

Windows Users Still Under Attack From Stuxnet, Halo, and Zeus

Posted in Microsoft, Security, Windows at 12:52 am by Dr. Roy Schestowitz

Would you trust Microsoft Windows in nuclear programmes?

Nuclear artillery
GRABLE EVENT – Part of Operation Upshot-Knothole, was a 15-kiloton test fired from a 280-mm cannon on May 25, 1953 at the Nevada Proving Grounds. Frenchman’s Flat, Nevada – Atomic Cannon TestHistory’s first atomic artillery shell fired from the Army’s new 280-mm artillery gun. Hundreds of high ranking Armed Forces officers and members of Congress are present. The fireball ascending. (source: Wikipedia)

Summary: Stuxnet — perhaps best known for its effects on Microsoft Windows-dependent nuclear programmes — is now a Chinese concern as well; Windows users are still under heavy artillery from malware

ALL WE have been saying about Stuxnet so far can be found in the following posts (this epidemic is still out of control):

  1. Ralph Langner Says Windows Malware Possibly Designed to Derail Iran’s Nuclear Programme
  2. Windows Viruses Can be Politically Motivated Sometimes
  3. Who Needs Windows Back Doors When It’s So Insecure?
  4. Windows Insecurity Becomes a Political Issue
  5. Windows, Stuxnet, and Public Stoning
  6. Stuxnet Grows Beyond Siemens-Windows Infections
  7. Has BP Already Abandoned Windows?
  8. Reports: Apple to Charge for (Security) Updates
  9. Windows Viruses Can be Politically Motivated Sometimes
  10. New Flaw in Windows Facilitates More DDOS Attacks
  11. Siemens is Bad for Industry, Partly Due to Microsoft
  12. Microsoft Security Issues in The British Press, Vista and Vista 7 No Panacea
  13. Microsoft’s Negligence in Patching (Worst Amongst All Companies) to Blame for Stuxnet
  14. Microsoft Software: a Darwin Test for Incompetence
  15. Bad September for Microsoft Security, Symantec Buyout Rumours
  16. Microsoft Claims Credit for Failing in Security
  17. Many Windows Servers Being Abandoned; Minnesota Goes the Opposite Direction by Giving Microsoft Its Data

The risk of accidental nuclear exchanges is said to be on par with if not greater than that of a man-triggered nuclear war. In the Cuban Missile Crisis, a Soviet submarine was just seconds away from launching nuclear missiles into US targets (the report was unsealed only decades later) and just over a decade ago antiquated Russian equipment almost fired automatically at false alarms of nuclear war (it was manually prevented before an accidental nuclear war could be started). The danger of Microsoft Windows in such sensitive operations ought to become apparent. Other than man-made global warming/peak oil/famine, the greatest threat to human survival is said to be those 50,000+ nuclear warheads which are kept under control by one operating system or another.

“Iran arrests Stuxnet ‘nuclear spies’,” reports IDG.

Iran says it has detained a number of ‘nuclear spies’ in connection with the Stuxnet malware attacks on its nuclear programme computer systems last week.

Who has been arrested and on what evidence has not yet been explained, but the country’s Intelligence Minister, Heidar Moslehi, adopted a triumphant tone in reported comments made to the Iranian Mehr News agency and domestic TV sources.

The fear finally spreads to China, which is another country the West loves to fear. “Nationwide holiday ups China’s risk to Stuxnet,” says this new headline.

Computer hackers have warned that the week-long National Day holiday in China that began Friday could leave the country vulnerable to further attacks from Stuxnet, according to a report by news agency AFP.

It turns out that Stuxnet has been out there for quite some time:

Sophisticated stuxnet malware is approaching 18 months old

[...]

The report reveals that Stuxnet is a complex piece of code that generates no less than 32 payload exports and can spread in multiple environments, including in local area networks using a vulnerability in the Windows print spooler, as well as tapping Windows Server to hit smaller enterprises.

When it’s estimated that one in two Windows PCs is a zombie PC and reporters still fail to call out Windows, how will anyone ever wisen up? Even a Microsoft console game, Halo [1, 2], has become a vector for infecting Windows based on this news:

Gamers looking to get the Recon Armor in the latest iteration of the Halo franchise (Halo: Reach) should think twice about using “alternative” methods.

Microsoft is warning fans of the game to steer clear of some code generators which promise to deliver the rare armor, but instead infect their computers with malware.

The Windows-only Zeus, which we wrote about in [1, 2, 3, 4, 5], is targeting Linkedin users who are running Windows at the moment:

Nevertheless, if anyone is affected with the spam mail, Cisco recommends that that person should reset his passwords since the Zeus Trojan attack seizes login credentials and passwords.

Why go through all this complexity/trouble? If my parents use GNU/Linux on the desktop, everyone can too. It’s not that hard (in certain ways it’s easier) and it is a lot safer.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

DecorWhat Else is New


  1. Links 06/02/2023: Sparky 6.6 and IPFire 2.27 – Core Update 173

    Links for the day



  2. Taking Back Control or Seizing Autonomy Over the News Cycle (Informing People, Culling the Marketing)





  3. Reality Versus Fiction: EPO Insiders Versus EPO Web Site and UPC 'Churnalists'

    The "official" sources of the European Patent Office (EPO), as well as the sedated "media" that the EPO is bribing for further bias, cannot tell the truth about this very large institution; for proper examination of Europe's largest patent office one must pursue the interpretation by longtime veterans and insiders, who are increasingly upset and abused (they're being pressured to grant patents in violation of the charter of the EPO)



  4. Links 06/02/2023: Linux 6.2 RC7 and Fatal Earthquake

    Links for the day



  5. IRC Proceedings: Sunday, February 05, 2023

    IRC logs for Sunday, February 05, 2023



  6. Links 05/02/2023: Wayland in Bookworm and xvidtune 1.0.4

    Links for the day



  7. Links 05/02/2023: Pakistan Blocks Wikipedia, Musharraf Dies

    Links for the day



  8. IRC Proceedings: Saturday, February 04, 2023

    IRC logs for Saturday, February 04, 2023



  9. Links 04/02/2023: FOSDEM Happening and Ken Thompson in SoCal Linux Expo

    Links for the day



  10. 2023 is the Year Taxpayers' Money Goes to War and Energy Subsidies, Not Tech

    Now that a lot of powerful and omnipresent ‘tech’ (spying and policing) companies are rotting away we have golden opportunities to bring about positive change and maybe even recruit technical people for good causes



  11. Getting Back to Productive Computer Systems Would Benefit Public Health and Not Just Boost Productivity

    “Smartphoneshame” (shaming an unhealthy culture of obsession with “apps”) would potentially bring about a better, more sociable society with fewer mental health crises and higher productivity levels



  12. Links 04/02/2023: This Week in KDE and Many More Tech Layoffs

    Links for the day



  13. Dotcom Boom and Bust, Round 2

    The age of technology giants/monopolies devouring everything or military-funded (i.e. taxpayers-subsidised) surveillance/censorship tentacles, in effect privatised eyes of the state, may be ending; the United States can barely sustain that anymore and raising the debt ceiling won't solve that (buying time isn't the solution)



  14. Society Would Benefit From a Smartphoneshame Movement

    In a society plagued by blackmail, surveillance and frivolous lawsuits it is important to reconsider the notion of “smart” phone ownership; these devices give potentially authoritarian companies and governments far too much power over people (in the EU they want to introduce new legislation that would, in effect, ban Free software if it enables true privacy)



  15. IRC Proceedings: Friday, February 03, 2023

    IRC logs for Friday, February 03, 2023



  16. IRC Proceedings: Thursday, February 02, 2023

    IRC logs for Thursday, February 02, 2023



  17. Links 03/02/2023: Proton 7.0-6 Released, ScummVM 2.7 Testing

    Links for the day



  18. Links 03/02/2023: OpenSSH 9.2 and OBS Studio 29.0.1

    Links for the day



  19. Links 03/02/2023: GNU C Library 2.37

    Links for the day



  20. Sirius Finished

    Yesterday I was sent a letter approving my resignation from Sirius ‘Open Source’, two months after I had already announced that I was resigning with immediate effect; they sent an identical letter to my wife (this time, unlike before, they remembered to also change the names!!)



  21. The Collapse of Sirius in a Nutshell: How to Identify the Symptoms and Decide When to Leave

    Sirius is finished, but it's important to share the lessons learned with other people; there might be other "pretenders" out there and they need to be abandoned



  22. Links 03/02/2023: WINE 8.1 and RapidDisk 9.0.0

    Links for the day



  23. Links 02/02/2023: KDE Gear 22.12.2 and LibreOffice 7.5

    Links for the day



  24. Linux News or Marketing Platform?

    Ads everywhere: Phoronix puts them at the top, bottom, navigation bar, left, and right just to read some Microsoft junk (puff pieces about something that nobody other than Microsoft even uses); in addition there are pop-ups asking for consent to send visitors’ data to hundreds of data brokers



  25. Daily Links at Techrights Turn 15, Time to Give Them an Upgrade

    This year we have several 15-year anniversaries; one of them is Daily Links (it turned 15 earlier this week) and we've been working to improve these batches of links, making them a lot more extensive and somewhat better structured/clustered



  26. Back to Focusing on Unified Patent Court (UPC) Crimes and Illegal Patent Agenda, Including the EPO's

    The EPO's (European Patent Office, Europe's second-largest institution) violations of constitutions, laws and so on merit more coverage, seeing that what's left of the "media" not only fails to cover scandalous things but is actively cheering for criminals (in exchange for money)



  27. European Patent Office Staff Votes in Favour of Freedom of Association (97% of Voters in Support)

    The Central Staff Committee (CSC) at the EPO makes a strong case for António Campinos to stop breaking and law and actually start obeying court orders (he’s no better than Benoît Battistelli and he uses worse language already)



  28. Links 02/02/2023: Glibc 2.37 and Go 1.20

    Links for the day



  29. IRC Proceedings: Wednesday, February 01, 2023

    IRC logs for Wednesday, February 01, 2023



  30. Links 01/02/2023: Security Problems, Unrest, and More

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts