 SearchNavigation |
ATTACK ALERT - Zero Day Vulnerability in all versions of Windows
Submitted by nathan on Mon, 07/19/2010 - 21:34
According to this article from F-Secure there is a massive hole in Windows Shell that's being actively exploited by the Stuxnet Rootkit. According to the article, the best available work-around at the moment is: |
 1010 N. Tennessee Street, Suite 102 Cartersville, GA 30120 770-386-8900 |
|
Sophos releases *free* tool to prevent execution of the exploit
Security firm Sophos has released a free tool to protect vulnerable computers (e.g., anything running Windows) from this exploit. Information on the tool and a download link are available below:
http://www.sophos.com/security/topic/shortcut.html
Zeus bot now taking advantage of this flaw
According to this article over at The Register, the Zeus cybercrime toolkit is now taking advantage of this vulnerability. From the article:
Security firm F-Secure reports the appearance of strains of Zeus that take advantage of the same security hole exploited by the Stuxnet worm. Zeus-contaminated emails pose as security messages from Microsoft, containing contaminated ZIP file attachments laced with a malicious payload that utilises the lnk flaw to infect targeted systems.
Microsoft is advising users to apply temporary workarounds while its security researchers investigate the shortcut flaw, a process likely to eventually result in a patch.
Metasploit module now available to exploit the LNK vulnerability
Fresh in from the 'from bad to worse' category, there is now a Metasploit plugin to make it even easier to exploit the recently released zero day in all versions of MS Windows. Full details are available Here