Eye on Security: Microsoft Windows Emergency Patch, Botnets Grab Data, Malware Scam Analysis
- Dr. Roy Schestowitz
- 2010-08-06 12:12:28 UTC
- Modified: 2010-08-06 12:12:28 UTC
Summary: An update on problems Windows users may be experiencing
●
Microsoft rushes out emergency fix for critical Windows bug (
more about this emergency)
Microsoft on Monday rushed out an emergency patch for a critical vulnerability that criminals are exploiting to install malware on all supported versions of the Windows operating system.
●
Botnet with 60GB of stolen data cracked wide open
Most botnet command-and-control channels run on compromised webservers or web-hosting services designed for criminals, making it possible to dismantle the network by taking down the central server. Mumba, by contrast, makes use of fast-flux technology, in which the operations are carried out on thousands of compromised PCs. That allows the IP address and host machine to change every few minutes, a measure that frequently foils takedown attempts by researchers and law enforcement.
●
Anatomy Of An Attempted Malware Scam
The display media segment is the newest target of malvertising, the latest trend in online criminal methodology. The problem has escalated in recent months and despite many suppliers' best efforts, it continues to grow. The culprits behind many of these attacks are based in foreign states leaving little course to take action. While the best defense against malvertising is to prevent it from happening in the first place, this has proven to be a challenge for even the most astute publishers, networks and the like.
We were recently the targets of one such attempt, and while it certainly wasn't the first "fake agency" we've been besieged by (and that we've successfully stopped), it is one of the most organized efforts we've encountered so far. Below we've outlined the approach that was used and the findings of our investigation as an FYI to others who may be on the target list.
Recent Techrights' Posts
- Changing One's Name Won't Change One's Past
- People who have earned a bad reputation are not magically "entitled" to reset
- People Who Assault Women Are Not Victims of "Distress"
- It seems like an American tradition. In a country with almost 50 presidents, not even one was a female.
- Adoption of Gemini Protocol Still Growing
- Gemini Protocol is being obscured by the media - it doesn't help that Google 'hijacked' the word "Gemini" - but people still manage to find out about it, download a client, and use it
- Brett Wilson LLP "Takes it Personal" (Character Assassination, Not Professionalism). Everybody Can See That.
- On behalf of violent men
- Pissing Contests and Pissing Off Everyone
- people who came from Microsoft are trying to vex and divide the community
- Microsoft Repeats the Mistakes Made by the EPO After We Exposed a Major Microsoft/EPO Scandal 10 Years Ago
- That scandal was all over the media, not just in English
-
- Links 14/07/2025: Chatbots Broken Again, McHire LLM Shows Limits of the Hype
- Links for the day
- Slashdot Media Turned Linux Journal Into a Slopfarm and Now Slashdot Actively Promotes Anti-Linux Slopfarms
- Yes, "no-nonsense" apparently means actual nonsense
- Links 14/07/2025: Arresting Photographers, Threats to Revoke US Citizenship Over Criticism
- Links for the day
- More EPO Leaks on the Way
- We hope that Mr. Rowan will actually try to refute what we say and show, not merely point the finger at the messengers
- Decommodification is a Corporate Strategy Against Communities
- systemd is led by Microsoft and hosted by Microsoft
- copyleft.org 'Hijacked' by the People Who Attack the Person Who Created Copyleft
- So far there's nothing "tasteless" in copyleft.org, but that can change at any time in the future
- Asking People to Take Down Articles and Videos Only Makes These More Popular and "Viral"
- If you do something bad, one of the worst things you can possibly do it try to silence those who speak about it
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Sunday, July 13, 2025
- IRC logs for Sunday, July 13, 2025
- Two-Thirds Towards FSF Goal, Richard Stallman to Give Talks in Europe
- There are 67 left before reaching the target
- Gemini Links 14/07/2025: Politicised Tech and "Leaving GitHub"
- Links for the day
- The Demise of LLMs
- We've just checked BetaNews again. They've dropped all the slop and went back to human authors.
- Gemini Links 13/07/2025: Sonpo Museum of Art and FCEUX
- Links for the day
- Links 13/07/2025: UnitedHealth's Censorship Campaign, Australia Wary of China
- Links for the day
- Firing Away With Nonsense
- Or fighting fire with fire
- Links 13/07/2025: Climate Crisis, GAFAM Poisoning the Water
- Links for the day
- Turns Out LLMs for Code Don't Save Time and Don't Improve Quality
- Neither legal nor useful
- The Microsofters Will Have an Obligation to Compensate Us
- This story isn't just about Microsoft. It's also about corruption, there are many women victims, there is abject "abuse of process", and many more scandals to be illuminated in years to come.
- Reproducing at the EPO Instead of Producing Monopolies for Foreign Monopolies With Their Price-Fixing Cartels
- Does the EPO recognise the need of well-educated Europeans to bear kids?
- Valnet Inc. Dominates Real (Not LLM Slop) GNU/Linux Coverage in 2025
- And likely in prior years, too
- Free Software Foundation (FSF) Fund Raiser Goes on
- Later this month we'll expose another OSI scandal
- EPO Staff Representatives Issue a Warning About Staff's Health and Inadequate Care
- Even the EPO's own stakeholders (money sources) are openly protesting against what the EPO became
- Links 13/07/2025: Partly Assorted News From Deutsche Welle and CBC
- Links for the day
- Gemini Links 13/07/2025: Board Games and Battle Styles
- Gemini Links for the day
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Saturday, July 12, 2025
- IRC logs for Saturday, July 12, 2025
- Plunder at the Second-Largest Institution in Europe
- cuts, neglect, health problems, even early deaths
- Links 12/07/2025: Political Developments, Attack on Opposition, Climate Actions
- Links for the day
- Gemini Links 12/07/2025: Melodic Musings and Small Web July
- Links for the day
- Links 12/07/2025: Jail in China for Homoerotica, South Korea Discriminates Against Old Workers
- Links for the day
- If Only Everything Was Rewritten in Rust, We'd Have No More Security Issues?
- Nope.
- Links 12/07/2025: Birdwatching and Fake/Misleading Wall Street 'Valuation' Figures
- Links for the day
- Gemini Links 12/07/2025: How to Avoid Writing, Apps for Android
- Links for the day
- Using SLAPPs to Cover Up Sexual Abuse and Strangulation
- The exact same legal team of the Serial Strangler from Microsoft and Garrett already has a history fighting against "metoo"
- EPO Staff Committee on Harassment in the Workplace
- slides
- Adding the Voice of Writers to UK SLAPP Reform
- The journey to repair antiquated (monarchy era) laws will likely be long
- EPO Takes More Money From Staff for Speculation (Pensions), Actuarial Study Explains the Impact
- "The key change in this year’s Actuarial Study, due to cascading the new “risk appetite” from the financial study, is a significant increase of the total pension contribution rate of 5.7 percentage points, up to a total of 37.8%. This is driven by an unprecedented decrease in the discount rate of 105 bps down to 2.2%."
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Friday, July 11, 2025
- IRC logs for Friday, July 11, 2025