Eye on Security: Microsoft Windows Emergency Patch, Botnets Grab Data, Malware Scam Analysis
- Dr. Roy Schestowitz
- 2010-08-06 12:12:28 UTC
- Modified: 2010-08-06 12:12:28 UTC
Summary: An update on problems Windows users may be experiencing
●
Microsoft rushes out emergency fix for critical Windows bug (
more about this emergency)
Microsoft on Monday rushed out an emergency patch for a critical vulnerability that criminals are exploiting to install malware on all supported versions of the Windows operating system.
●
Botnet with 60GB of stolen data cracked wide open
Most botnet command-and-control channels run on compromised webservers or web-hosting services designed for criminals, making it possible to dismantle the network by taking down the central server. Mumba, by contrast, makes use of fast-flux technology, in which the operations are carried out on thousands of compromised PCs. That allows the IP address and host machine to change every few minutes, a measure that frequently foils takedown attempts by researchers and law enforcement.
●
Anatomy Of An Attempted Malware Scam
The display media segment is the newest target of malvertising, the latest trend in online criminal methodology. The problem has escalated in recent months and despite many suppliers' best efforts, it continues to grow. The culprits behind many of these attacks are based in foreign states leaving little course to take action. While the best defense against malvertising is to prevent it from happening in the first place, this has proven to be a challenge for even the most astute publishers, networks and the like.
We were recently the targets of one such attempt, and while it certainly wasn't the first "fake agency" we've been besieged by (and that we've successfully stopped), it is one of the most organized efforts we've encountered so far. Below we've outlined the approach that was used and the findings of our investigation as an FYI to others who may be on the target list.
Recent Techrights' Posts
- Free University of Bozen-Bolzano Proud to Host Free Software Talk by Richard Stallman
- ahead of Monday's talk
- Slopwatch: Anti-Linux Machine-Generated FUD (LLM Slop) From GBHackers, CybersecurityNews, and Guardian Digital, Inc (Google News Promotes Slop Plagiarism, Misinformation)
- Companies that lie try to drown out the signal with falsehoods
-
- Microsoft's Market Share in Cameroon Falls to New Lows
- This means a lot of Android users (iOS is about 4 times smaller), but Android does not mean freedom
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Friday, February 21, 2025
- IRC logs for Friday, February 21, 2025
- The Streisand Effect is Real
- So don't be evil. Also, don't strangle women.
- Links 21/02/2025: Linux Foundation Openwashing, Microsoft Copilot Goes Down
- Links for the day
- Links 21/02/2025: Doomscrolling and European Ham Radio Show
- Links for the day
- Links 21/02/2025: TikTok Layoffs, WebOS Software Patents in Bad Hands
- Links for the day
- Gemini Links 21/02/2025: Web Browsers, Mechanical Shortcuts, and Internet Hygiene
- Links for the day
- Richard Stallman 'Only' Founded the FSF
- there's no reason to be upset at the FSF for keeping their founder in the Board
- Techrights Disconnected From the United States Two Years Ago
- Did people really need to wait for the US government to become this hostile towards the media before recognising the threat?
- Before Trying Censorship by Extortion the Serial Strangler From Microsoft Literally Begged Us to Delete Pages
- This is very clearly just a broad campaign of intimidation
- Hype Watch: Weeks After Microsoft Disappointed Investors With "Hey Hi" It's Trying Some "Quantum" Hype (Adding Impractical Vapourware to Accompany This Hype and Even LLM Slop in 'News' Clothing)
- Remember "metaverse"? What happened to media hype about "blockchain" and "IoT"?
- Report About February Mass Layoffs at Microsoft (Third Wave of Microsoft Layoffs in 2025) Comes Back From the Dead
- Yesterday we wrote about an article in CRN (reporting Microsoft layoffs) being removed without any reasons specified
- Links 21/02/2025: Myanmar Scam Centre and Disruptions at USPTO
- Links for the day
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Thursday, February 20, 2025
- IRC logs for Thursday, February 20, 2025
- gbhackers.com is Not Hackers, It's LLM Slop Outputs (Fake 'Articles') That Attack 'True Hackers'
- A site called linuxsecurity.com keeps doing this and now we see the slopfarm gbhackers.com doing the same
- Gemini Links 20/02/2025: Law of Warming and Cooling, Health, and Devlog
- Links for the day
- linuxsecurity.com Continues to Spread Lies or Machine-Generated FUD (Microsoft LLMs Likely the Source) About OpenSSH and Linux
- this LLM problem is global
- Links 20/02/2025: Microsoft Infosys Layoffs and IRS Layoffs (Good News for Rich Tax Evaders)
- Links for the day
- IBM Layoffs in Europe Already Happening or Underway (UK and Spain). They Try Not to Call These "Layoffs".
- "CIO" in particular was repeatedly mentioned lately, as was Consulting
- People Who Came From Microsoft Demanding Removal of Articles About Them, About Microsoft, and About Microsoft GitHub is "Generous" (According to Them)
- Imagine choosing a law firm that borrows money in the same year just to avoid overdraft in the bank!
- Possibly a Third Round of Mass Layoffs at Microsoft in 2025 ("Cloud Solution Architects, Customer Roles"), Report Removed or Censored
- This is literally the top story for "microsoft layoffs" right now
- Instead of 'DoS Protection' Cloudflare is Allegedly Conducting 'DoS Attacks' on Users of Browsers Other Than Firefox and GAFAM's DRM Sandboxes (Chrome, Safari and Others)
- If you value the Web, you will avoid Cloudflare
- Mixing Real With Fake in One 'Article' (by "Director of Content, Help Net Security")
- From what we can gather, he got machines to generate some slop for him
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Wednesday, February 19, 2025
- IRC logs for Wednesday, February 19, 2025