07.16.09
Gemini version available ♊︎It’s Official: Microsoft Windows Servers to Blame for Attacks on Korea and the United States
Korean War Memorial in Washington, DC
Summary: Windows victimises nations as it is used as a weapon on the Web
LINUX TODAY has just shared this finding about the source of the cyber attacks. We mentioned this a few days ago on a couple of occasions, but it could not be confirmed at the time that Windows zombies were behind the attacks. Well, it’s confirmed now:
In order to locate the source of the attacks, we have fought against C&C servers and have gained control of 2 in 8 of them. After analyzing the logs of these 2 servers, we discovered the IP address of the master server, which is 195.90.118.xxx. This IP is located in UK. The master server is running on Windows 2003 Server Operating System..
No change should be expected because following many “critical” flaws, some known ones remain unpatched and they won’t be addressed until August (at the earliest).
Microsoft released six bulletins – three covering critical flaws – on Tuesday as part of its monthly Patch Tuesday update cycle.
It’s back to the same familiar cycle. They ought to upgrade to GNU/Linux. █
“Two security researchers have developed a new technique that essentially bypasses all of the memory protection safeguards in the Windows Vista operating system…”
–Dennis Fisher, August 7th, 2008