Inteligencia y Seguridad Frente Externo En Profundidad Economia y Finanzas Transparencia
  En Parrilla Medio Ambiente Sociedad High Tech Contacto
High Tech  
 
02/07/2010 | Hackers target Microsoft Windows XP support system

BBC

Hi-tech criminals are "escalating" attacks on an unpatched bug in the Windows XP help and support system.

 

Microsoft said it had seen more than 10,000 machines hit by the attack that, so far, it has not found a fix for.

Windows PCs falling victim will have control of that machine handed over to attackers.

Microsoft said the attacks had gone from theoretical to real very quickly and urged users to take steps to protect themselves.

'Nightmare' attack

Microsoft revealed the upturn in attacks in a blog post saying that it had been monitoring activity around the loophole since it was first revealed on 10 June.

Found by Google engineer Travis Ormandy, the loophole revolves around the Help and Support system built into XP. Mr Ormandy found that it was possible to exploit its ability to give remote aid and apply fixes to ailing machines.

Initially, said Microsoft, it only saw "innocuous" attacks by researchers attempting to replicate what Mr Ormandy had found.

Real exploits turned up on 15 June and these have been enthusiastically adopted by hi-tech criminals.

Writing on the Microsoft Security Centre blog, Holly Stewart said it had started seeing "seemingly-automated, randomly-generated" web pages that host the exploit.

A variety of trojans, spam tools and viruses are being downloaded to compromised machines, she said.

Rik Ferguson, senior security researcher at Trend Micro, said: "It's certainly very serious and is now being actively exploited by what appears to be several different groups as you can see form the multiple payloads being delivered."

Carole Thierault, senior security consultant at Sophos, said attacks like this were a "nightmare" to defend against if people did not regularly update or use anti-virus.

Statistics gathered by Microsoft suggest Portugal was taking the brunt of the attacks but users in Russia and Croatia were also being hit. More than 10,000 machines had been hit at least once by the attack, it found.

To avoid falling victim, Microsoft advised users to turn off the part of the Help and Support system that is vulnerable. It has produced an automated tool that can do this for users.

Mr Ferguson from Trend Micro said there were other steps users could take to stay safe.

"It is important to ensure that your security software is capable of identifying and blocking malicious websites," he said, "as you can be sure that the criminals behind this will be constantly updating their malicious files to try and avoid traditional security."

Microsoft said it was working on a lasting fix for the loophole.

BBC (Reino Unido)

 


Otras Notas Relacionadas... ( Records 111 to 117 of 117 )
fecha titulo
29/11/2004 U.K. government hit with another large computer failure
16/11/2004 ¿Microsoft utilizando software pirateado?
13/11/2004 NSA seeks better analysis technologies
03/10/2004 Hacia un gobierno mundial de Internet
06/10/2003 MS Office 2003 y razones para no usarlo
23/07/2003 Una red cibernética vigila al Gobierno estadounidense
28/01/2003 Difamación en Internet: ¿quién decide?


Otras Notas del Autor
fecha
Título
19/08/2020|
18/05/2020|
05/02/2020|
11/07/2019|
28/06/2019|
25/06/2019|
30/11/2018|
12/10/2018|
11/10/2018|
31/08/2018|
14/08/2018|
23/06/2018|
31/05/2018|
22/03/2018|
06/12/2017|
23/11/2017|
20/11/2017|
19/11/2017|
14/06/2017|
10/05/2017|
30/04/2017|
25/04/2017|
25/04/2017|
15/12/2016|
07/04/2016|
17/02/2016|
17/02/2016|
11/12/2015|
18/07/2015|
16/12/2014|
20/11/2014|
18/11/2014|
04/10/2014|
27/08/2014|
27/08/2014|
07/06/2014|
11/03/2014|
20/02/2014|
20/02/2014|
27/10/2013|
07/09/2013|
03/09/2013|
03/09/2013|
01/09/2013|
30/08/2013|
19/08/2013|
26/07/2013|
19/07/2013|
10/07/2013|
09/07/2013|
03/06/2013|
02/06/2013|
16/05/2013|
10/05/2013|
07/05/2013|
06/05/2013|
15/04/2013|
05/04/2013|
30/03/2013|
12/03/2013|
04/03/2013|
19/02/2013|
30/01/2013|
30/01/2013|
30/01/2013|
17/01/2013|
17/01/2013|
17/01/2013|
17/01/2013|
15/01/2013|
15/01/2013|
26/12/2012|
21/12/2012|
05/12/2012|
02/12/2012|
23/11/2012|
19/11/2012|
04/09/2012|
03/09/2012|
25/08/2012|
05/08/2012|
05/08/2012|
04/08/2012|
03/08/2012|
02/08/2012|
01/08/2012|
01/08/2012|
31/07/2012|
31/07/2012|
25/07/2012|
25/07/2012|
19/07/2012|
18/07/2012|
17/07/2012|
14/07/2012|
13/07/2012|
09/07/2012|
08/07/2012|
05/07/2012|
29/06/2012|
27/06/2012|
25/06/2012|
23/06/2012|
16/06/2012|
10/06/2012|
26/05/2012|
25/05/2012|
24/05/2012|
24/05/2012|
19/05/2012|
15/05/2012|
13/05/2012|
08/05/2012|
08/05/2012|
06/05/2012|
02/05/2012|
02/05/2012|
29/04/2012|
28/04/2012|
26/04/2012|
24/04/2012|
09/04/2012|
02/04/2012|
11/03/2012|
11/03/2012|
10/03/2012|
10/03/2012|
02/03/2012|
02/03/2012|
02/03/2012|
02/03/2012|
02/03/2012|
02/03/2012|
29/02/2012|
29/02/2012|
29/02/2012|
23/02/2012|
23/02/2012|
23/02/2012|
26/10/2011|
24/10/2011|
21/10/2011|
20/10/2011|
06/10/2011|
06/10/2011|
02/10/2011|
30/09/2011|
24/09/2011|
23/09/2011|
21/09/2011|
09/09/2011|
09/09/2011|
08/09/2011|
08/09/2011|
07/09/2011|
07/09/2011|
06/09/2011|
06/09/2011|
05/09/2011|
05/09/2011|
01/09/2011|
01/09/2011|
01/09/2011|
01/09/2011|
01/09/2011|
01/09/2011|
31/08/2011|
31/08/2011|
31/08/2011|
31/08/2011|
31/08/2011|
31/08/2011|
22/08/2011|
22/08/2011|
17/08/2011|
17/08/2011|
16/08/2011|
16/08/2011|
16/08/2011|
15/08/2011|
15/08/2011|
15/08/2011|
13/08/2011|
10/08/2011|
09/08/2011|
09/08/2011|
09/08/2011|
05/08/2011|
05/08/2011|
04/08/2011|
03/08/2011|
03/08/2011|
02/08/2011|
30/07/2011|
30/07/2011|
30/07/2011|
27/07/2011|
22/07/2011|
21/07/2011|
20/07/2011|
20/07/2011|
20/07/2011|
20/07/2011|
19/07/2011|
19/07/2011|
19/07/2011|
19/07/2011|
19/07/2011|
19/07/2011|
15/07/2011|
15/07/2011|
14/07/2011|
14/07/2011|
14/07/2011|
14/07/2011|
13/07/2011|
13/07/2011|
11/07/2011|
11/07/2011|
09/07/2011|
09/07/2011|
08/07/2011|
08/07/2011|
03/07/2011|
03/07/2011|
02/07/2011|
02/07/2011|
30/06/2011|
30/06/2011|
28/06/2011|
28/06/2011|
28/06/2011|
28/06/2011|
24/06/2011|
24/06/2011|
24/06/2011|
24/06/2011|
23/06/2011|
23/06/2011|
21/06/2011|
21/06/2011|
19/06/2011|
19/06/2011|
16/06/2011|
16/06/2011|
13/06/2011|
13/06/2011|
12/06/2011|
12/06/2011|
11/06/2011|
11/06/2011|
10/06/2011|
10/06/2011|
10/06/2011|
10/06/2011|
08/06/2011|
08/06/2011|
07/06/2011|
07/06/2011|
07/06/2011|
07/06/2011|
30/05/2011|
30/05/2011|
26/05/2011|
26/05/2011|
26/05/2011|
26/05/2011|
25/05/2011|
25/05/2011|
24/05/2011|
24/05/2011|
24/05/2011|
24/05/2011|
23/05/2011|
23/05/2011|
21/05/2011|
21/05/2011|
19/05/2011|
19/05/2011|
19/05/2011|
19/05/2011|
14/05/2011|
14/05/2011|
13/05/2011|
13/05/2011|
13/05/2011|
13/05/2011|
11/05/2011|
11/05/2011|
10/05/2011|
10/05/2011|
06/05/2011|
06/05/2011|
29/04/2011|
29/04/2011|
28/04/2011|
28/04/2011|
28/04/2011|
28/04/2011|
24/04/2011|
24/04/2011|
23/04/2011|
23/04/2011|
23/04/2011|
23/04/2011|
22/04/2011|
22/04/2011|
21/04/2011|
21/04/2011|
19/04/2011|
19/04/2011|
19/04/2011|
19/04/2011|
19/04/2011|
19/04/2011|
18/04/2011|
18/04/2011|
12/04/2011|
11/04/2011|
11/04/2011|
06/04/2011|
06/04/2011|
04/04/2011|
31/03/2011|
31/03/2011|
30/03/2011|
24/03/2011|
24/03/2011|
11/03/2011|
04/03/2011|
04/03/2011|
01/03/2011|
27/02/2011|
26/02/2011|
26/02/2011|
25/02/2011|
24/02/2011|
23/02/2011|
21/02/2011|
21/02/2011|
18/02/2011|
14/02/2011|
01/02/2011|
01/02/2011|
26/01/2011|
17/01/2011|
14/01/2011|
20/12/2010|
21/11/2010|
14/11/2010|
18/10/2010|
17/10/2010|
08/10/2010|
03/10/2010|
13/09/2010|
09/08/2010|
08/08/2010|
01/08/2010|
26/07/2010|
25/07/2010|
11/07/2010|
01/07/2010|
29/06/2010|
14/06/2010|
08/06/2010|
04/06/2010|
19/05/2010|
21/04/2010|
19/04/2010|
26/03/2010|
19/03/2010|
19/02/2010|
13/02/2010|
13/01/2010|
19/12/2009|
13/09/2009|
12/09/2009|
01/09/2009|
20/08/2009|
19/08/2009|
16/08/2009|
09/08/2009|
09/08/2009|
01/04/2009|
27/03/2009|
21/03/2009|
13/03/2009|
13/03/2009|
05/01/2008|
18/07/2007|
09/05/2007|
09/05/2007|
11/01/2007|
11/01/2007|
30/12/2006|
30/12/2006|
02/10/2006|
26/07/2006|
06/07/2006|
19/06/2006|
19/06/2006|
05/06/2006|
30/04/2006|
30/04/2006|
03/04/2006|
06/11/2005|
29/07/2005|
19/03/2005|
19/03/2005|
01/01/2005|
01/01/2005|
09/12/2004|
09/12/2004|

ver + notas
 
Center for the Study of the Presidency
Freedom House