Privacy, Security & Virus Information

Hackers Find (Yet Another) Flaw in Windows XP

Microsoft has recently issued a warning that they have discovered and are busy exploiting a critical Windows vulnerability that, for the time being, remains un-patched. With Windows XP Service Pack 2 (SP2) now no longer being serviced, Microsoft have announced that while they do intend to repair the flaw, they will not be providing a repair patch for any computers that are still running Windows XP SP2 version. Windows XP SP2 users must upgrade to the XP SP3 version in order to receive a patch for the shortcut flaw, when it eventually become available.

In a recent security update Microsoft have more or less admitted what has been in any effect an open secret for the last few weeks. Hackers have discovered and are taking full advantage of a bug that has been discovered in Windows "shortcut" files. When someone finds a favourite website and save it to their desktop and not in a "favourites" file that they are actually leaving themselves open to virus attacks through these links.

The attacks are particularly based around a clan of malware known as Stuxnet. Stuxnet also includes a particularly virulent Trojan horse that is capable of downloading several versions of attack code, that include a rootkit that is particularly adept at covering up all evidence of a virus attack.

Microsoft has gone on to add that as well as the Windows XP2, Windows XP SP3, Vista, Server 2003, Windows 7, Server 2008 and Server 2008 R2, also contain the bug making them vulnerable to attack. Also on the hacker's list of potential targets are the beta versions of Windows 7 SP1 and Server 2008 R2 SP1, which Microsoft released only with the last few weeks. Continued and worrying evidence that computer hackers are capable of targeting any piece of software.

The cross-over period between when XP2 is fully phased out and XP3 kicks in represents a "happy hunting ground" for hackers and one that they obviously intend to take full advantage of. During this transition period computer owners need to take every step to make sure that their computer security, and with it, their personal and financial security is not compromised. And the only way that this can be fully guaranteed is to install the most powerful and reliable anti-virus software available on the market today.

 

< Back