Selfish worm targets month-old Windows flaw
'Find your own vuln. This one's mine'
More than a month after Microsoft issued an emergency patch for a Windows vulnerability that allows for self-replicating exploits, researchers have spotted a wave of new attacks in the wild that target the critical flaw.
Exploits of MS08-067 have been reported on and off since Microsoft issued the patch in late October, but over the past week, the volume and sophistication of the attacks have grown, according to Ziv Mador, a researcher in Microsoft's Malware Protection Center. His assessment was echoed in reports issued this week by anti-virus providers McAfee and Symantec, the latter which ratcheted up its ThreatCon alert level as a result.
A worm dubbed Conficker.A by Microsoft and Downadup by Symantec is aggressively slithering through corporate networks and home systems alike. It opens up a random port and connects to a server using HTTP. It uses several techniques to obfuscate the attack.
The worm is notable because once it takes hold of a machine it patches the vulnerability to prevent competing attackers from taking hold of the same valuable resource. Infection reports are coming mostly from the US, but other regions, including Western Europe, Japan, China and Brazil, are also affected. Conficker.A avoids infecting PCs based in Ukraine, which is presumably where the attackers are based.
MS08-067 is among the more critical vulnerabilities to hit Windows because on XP versions and earlier a single successful attack can touch off a chain reaction in which other machines on the same network are also compromised. The threat posed by the flaw was so severe Microsoft took the unusual step of issuing an emergency patch outside of its normal update cycle.
It's not surprising that bad guys would target a hole as nasty and gaping as MS08-067. What we still can't fathom is why anyone hasn't yet installed the patch. We're not ones to blame the victim, but anyone attacked by Conficker deserves a generous portion of the responsibility. ®
Why i dont patch....
Because i'm on dial up you insensitive clods :-(
Last time i tried i took one look at the download size for just the critical patches and gave up.
Hence the dual boot to linux which means i can surf for smut without worrying about being rooted... sure, they may be able to mess with my login (assuming they even have code it place to handle linux) but they would probably have to be very very good to actually get root access (unless im hit by a keylogger and subsequently do a sudo.....).
On the subject of layers and porn, i dont think we have any worries. Porn will be available at all levels. 99% of the internet is porn... where would it be without it? Hell, my introduction to the fledgling internet via the early university JANET network was downloading pics of Cindy Crawford in swimwear.... (which is what passed for hardcore back in the old days, before the wheel was invented).
@Ted Treen, AC0236
Knowing how to properly administer and even program a computer is not like being a mechanic. It's far more like being the driver. Administering and programming computers is all just part of operating them. Knowing nothing about these subjects and expecting to get away with using a computer isn't the same as driving without knowing how to rewrite your engine management software, it's like driving without knowing traffic laws, or what your mirrors are for.
Maybe it's too hard for most people still, but this is a technology in its infancy. I hear the Model T was a bastard to drive as well, and when it was brought to the masses a lot of people were killed and injured. If you think learning how to secure your computer (and protect others from it) is too hard, maybe you should just sell it and get something less powerful, complicated and dangerous, like a TV or a games console.
"you'd have to pass some sort of test to prove you deserve access to that layer."
No way. Just imagine what the test would be to access the pr0n layer. Eww.
Mine's the Ultraviolet one.