Wednesday, May 16, 2007

Windows Updates Hijacked

Windows Updates Hijacked

Malware could be installed onto a PC in the security updates issued by Windows, experts have stated.

There is currently a program in circulation that is capable of hijacking Windows Update and installing malware that could leave a computer vulnerable to attack. The program works by bypassing a user's firewall and then downloading damaging files that then remain undetected.

A Microsoft spokesman stated: "Microsoft is aware of phttp://www.blogger.com/img/gl.link.gifublic reports that Background Intelligent Transfer Service (BITS) is being used by TrojanDownloader:Win32/Jowspry. "The bypass most commonly occurs after a successful social engineering attempt lures the user into inadvertently running [Jowspry], which then utilizes BITS to download additional malware."

Speaking to the BBC, security consultant Robert Schifreen said that the way to avoid infecting one's PC is to not click on any links or attachments unless one is sure that they are not infected. Meanwhile, management company Fortinet has joined the Microsoft Virus Information Alliance (VIA) to collaborate on monitoring the distribution of internet viruses.

www.dsldance.com

No comments: