📜 ⬆️ ⬇️

Microsoft has released a patch for Windows that prevents the Duqu worm from entering the system



Not so long ago on Habré there was news about the heir of Stuxnet , the Duqu worm. After several weeks of work, Microsoft has released a patch for its operating system. This patch closes the “hole” through which the malware enters the system. As is known, Duqu, in the first place, is designed to steal information from various industrial enterprises.

As stated in Microsoft, Duqu uses a vulnerability that is related to the Win32k True Type. This engine currently works in almost all supported by the corporation operating systems Windows. The list of operating systems includes Windows 7 with Windows Server 2008.
')


Under the condition of a successful attack, malicious software opens a “hole” that allows launching a malicious program with maximum privileges. Among other things, the attacker gets the opportunity to work with the victim software installed on the victim’s computer, install new programs, and also remove or add all sorts of information on the infected computer. There is also the possibility of creating additional accounts with maximum privileges.

The developers of the software giant claim that this patch is still a temporary solution. A little later, Microsoft will post a fix that can be considered the main one. So far, work has been done in this direction, and Microsoft developers are working with various kinds of specialists, trying to eliminate the threat as soon as possible. Some experts have already achieved: Duqu is already recognized by most modern antiviruses.

Via dailytech

Source: https://habr.com/ru/post/131907/


All Articles