08.16.10

Gemini version available ♊︎

Microsoft Security Issues in The British Press, Vista and Vista 7 No Panacea

Posted in Microsoft, Security, Vista, Vista 7, Windows at 4:10 am by Dr. Roy Schestowitz

Summary: Security news from the British press and IDG (gathered in recent weeks), affecting all versions of Windows

THE MSBBC (mentioned in the previous post) continues calling a criminal “hacker”, which deceives British readers.

Another report, specifically this one from The Inquirer (there are more such reports outside the UK), says that “[a] scary number of security suites fail on Windows Vista” and this potentially contradicts that story Microsoft had printed in IDG the other day.

Doomed from the start probably because they were tested on Windows Vista Business Edition SP2, the tests found a marked inability of some software to cope with heavy attacks. As opposed to Windows Vista’s inability to cope, full stop. Virus Bulletin’s crack squad also noted that false positive rates were very high, with legitimate files from Corel, Roxio and Adobe having been falsely identified as being infected.

Yesterday I went over to good friend of mine who has been stuck with Vista for a few years and hates it (I showed him KDE and GNOME, then set it up for his brother in law). Vista is in many ways a mess and the fonts are ugly on some screens (BSODs are an occasional problem too); Vista 7 is more of the same but somewhat improved. According to this new eWEEK readers survey, there are more GNU/Linux users there than Vista 7 users. No surprise.

Windows XP scored nearly 44 percent in a poll of which desktops eWEEK readers use to run their business. Microsoft’s Windows 7 came in behind Linux, while Vista languished with a handful of votes in the “other” category.

In other security news from this month, let’s look at The Register (UK):

Hoax Facebook virus makes more trouble than a real virus

Blackhole your malware

Anti-virus defences even shakier than feared

A study by web intelligence firm Cyveillance found that, on average, vendors detect less than 19 per cent of malware attacks on the first day malware appears in the wild. Even after 30 days, detection rates improved to just 61.7 per cent, on average.

Waledac zombie attacks rise from the grave

However, over recent weeks, the botnet is making a comeback of sorts. Spammed messages containing malicious attachment harbouring Waladec agents and disguised as tax invoices or job offers and the like have begun appearing, Trend Micro warns.

The same run of spam messages is also being used to spread fake anti-virus and other scams unrelated to Waledac, and there’s no sign that a new command and control structure, much less a fresh round of spamming, has begun.

Scotland Yard cuffs six in megaquid phish ring probe

Botnet that pwned 100,000 UK PCs taken out

Click fraud botnet unpicked

Cybercrooks use of botnets to make money by sending spam or launching denial of service attacks has become a well-understood business model.

But the controllers of networks of compromised PCs have other ways of turning an illicit profit, including using rogue traffic brokers to defraud reputable brands. Trend Micro’s write-up of a click fraud scam sheds light onto this less well-known but highly lucrative cyberscam.

“Malware Reaches An All-Time High,” claims this report.

McAfee found 6 million malicious files in the second quarter, compared to 4 million in the first quarter.

This was also covered by IDG, which published “Malware Call to Arms: Threat at All-Time High and Rising”

Going as far back as last month in IDG, we also have:

Atlanta Has Dubious Honor of Highest Malware Infection Rate

Natural Disasters and Global Warming Fuel the Malware Flames

After worm, Siemens says don’t change passwords

Trusteer Finds 100,000 UK Computers Infected With Zeus

We wrote about Zeus in [1, 2, 3] and about Stuxnet/Siemens in [1, 2, 3, 4, 5, 6]. “Stuxnet Industrial Worm Was Written Over a Year Ago,” claims IDG.

A sophisticated worm designed to steal industrial secrets has been around for much longer than previously thought, according to security experts investigating the malicious software.

Called Stuxnet, the worm was unknown until mid-July, when it was identified by investigators with VirusBlockAda, a security vendor based in Minsk, Belarus. The worm is notable not only for its technical sophistication, but also for the fact that it targets the industrial control system computers designed to run factories and power plants.

From CNET: “Stuxnet could hijack power plants, refineries”

“For example, at an energy production plant, the attacker would be able to download the plans for how the physical machinery in the plant is operated and analyze them to see how they want to change how the plant operates, and then they could inject their own code into the machinery to change how it works,” he said.

The Stuxnet worm propagates by exploiting a hole in all versions of Windows in the code that processes shortcut files ending in “.lnk.” It infects machines via USB drives but can also be embedded in a Web site, remote network share, or Microsoft Word document, Microsoft said.

Microsoft issued an emergency patch for the Windows Shortcut hole last week, but just installing the patch is not enough to protect systems running the Siemens program because the malware is capable of hiding code in the system that could allow a remote attacker to interfere with plant operations without anyone at the company knowing, according to O’Murchu.

That’s truly a national security issue. Watch this news from Japan: [via]

Computer criminal blows probation

Tokyo police said Wednesday they have arrested a 27-year-old man in Osaka on suspicion of using a computer virus to destroy stored data.

Unless or until Windows is removed, systems that affect many people’s lives will continue to be at risk.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

DecorWhat Else is New


  1. Heads of Patent Offices Are Immune to Coronavirus

    The overconfident chiefs of the U.S. Patent and Trademark Office (USPTO) and EPO might love speaking about COVID-19 (in relation to patents), but they do not take it seriously themselves



  2. Links 26/05/2022: Plex Finally on GNU/Linux

    Links for the day



  3. The General Consultative Committee of the EPO Exposes a Disaster and a Lack of Genuine Dialogue

    The General Consultative Committee (GCC) at the EPO deals with unlawful proposals from António Campinos (he’s happy to violate laws, constitutions, protocols, conventions, just like Benoît Battistelli did) and once again the abuses by managers is covered up; it’s as if the Office is run by unaccountable gangsters who arrogantly curse at everyone whilst insisting they’re the nicest people ever



  4. The Latest Letter to Josef Kratochvìl and the Heads of Delegation of the Administrative Council of the European Patent Organisation

    A week-old letter from the Central Staff Committee (CSC) to the Administrative Council of the European Patent Organisation highlights the nature of a crisis; there's no genuine dialogue and staff of the EPO (i.e. the scientists who do all the actual work) is constantly under attack



  5. [Meme] The Recordings Must Have Accidentally Been Lost While Breaking the Rules

    The EPO‘s “nicest” chief, Monopoly Tony, won’t even mention the recordings…



  6. Links 25/05/2022: ‘V Rising’ on GNU/Linux and Pearl Linux OS 11

    Links for the day



  7. Links 25/05/2022: Librem Tries Another Approach

    Links for the day



  8. IRC Proceedings: Tuesday, May 24, 2022

    IRC logs for Tuesday, May 24, 2022



  9. Links 24/05/2022: nginx-1.22.0 and WordPress 6.0

    Links for the day



  10. [Meme] Divine Protection

    You won’t find Monopoly Tony (António Campinos) wearing a mask at the EPO because the rules of the Office do not apply to him



  11. António Campinos and the Alicante Clique (EPO Management, Appointed Based on Nepotism Despite Lack of Qualifications) Nowadays Exploiting Kids for PR Charades

    The sick old habit of exploiting kids for Public Relations (PR) and marketing purposes is all too common at the EPO (they’re constantly exploiting “the children” to associate criticism of the EPO with demeaning the young and innocent), but the management — which enjoys nepotism and immunity rather than relevant skills — carries on today and it’s being called “inaugural”



  12. [Meme] Snake on a Plane

    The EPO‘s President ‘Monopoly Tony’ (António Campinos), whom you never see wearing a mask (none of the photo ops; he does not even socially distance himself from peers, he wears sneakers instead of masks) during the height of a pandemic, is the "f***ing president"; don’t tell him to wear one…



  13. Microsoft GitHub Exposé — Part XX — Entering Phase II

    We're about to resume the long-running series about the sick clique which ran GitHub until the assault on women became too much of a liability (among other wrongdoings and PR blunders)



  14. Links 24/05/2022: Fedora 37 Test Days and Tor Browser 11.0.13

    Links for the day



  15. Microsoft Vidal, as USPTO Director, Already Plays 'Political Cards' to Disguise and Deflect Away From the Corporate Agenda

    Microsoft Vidal, another corporate pawn in charge of the world’s most dangerous patent system, is using soft-spoken defle



  16. Links 24/05/2022: WAL-G 2.0

    Links for the day



  17. IRC Proceedings: Monday, May 23, 2022

    IRC logs for Monday, May 23, 2022



  18. Unethical Advertising, Published as So-called 'Articles', in CNX Software

    As we noted earlier this year, the CNX team is looking for money in the wrong places



  19. Links 23/05/2022: Broadcom to Buy VMware?

    Links for the day



  20. LibreOffice Conference 2022, As Before, Puts the Keynotes on Sale (the Rich Buy Influence, the Price Doubles)

    Discrimination against the community; talks and mentions are based on money, not merit ($2000 has become $4000 in just one year)



  21. Links 23/05/2022: Kdenlive 22.04.1 and New Alpine Linux Released

    Links for the day



  22. António Campinos Promotes Software Patents Using Buzzwords and Sketchy Loopholes With Dubious Legal Basis

    ‘Monopoly Tony’ (António Campinos) is shamelessly manipulating EPO processes at both ends (sender and receiver) to facilitate the illegal granting of invalid European software patents; we’re meant to think this former EU official and imposter (banker) is some guru in the sciences because he reads a lousy speech crafted for him with lots of meaningless buzzwords peppered all over it (he’s not good at reading it, either)



  23. [Meme] Jorgotta Be Kidding Us, Campinos!

    Monopoly Tony (António Campinos) runs the EPO by attacking the very legal basis of the EPO’s existence



  24. Unified Patent Court (UPC) Relies Too Much on Lies and Mischief Without Any Basis in Law

    Today’s video runs through the typical (weekly) lies from Team UPC — lies that are very easy to debunk; Team UPC not only drafted the thing but also looks to profit from it while misleading politicians and bribing publishers to spread intentionally misleading statements (lies)



  25. IRC Proceedings: Sunday, May 22, 2022

    IRC logs for Sunday, May 22, 2022



  26. Links 23/05/2022: Fedora 36 Reviewed

    Links for the day



  27. [Meme] It's My Working Party... And I'll Cry If I Want to!

    EPO President António Campinos is still not being held accountable for his Code of Conduct violations



  28. Links 22/05/2022: The 5.18 Kernel is Out

    Links for the day



  29. Gemini is Bigger Than Most People Care to Realise

    Geminispace has gotten to the point where it's too computationally expensive (or outright pricey) to study, let alone keep abreast of, Gemini capsules or the domain space as a whole



  30. Links 22/05/2022: Rock64 and Peppermint OS Release

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts