Members
  • Total Members: 14176
  • Latest: toxxxa
Stats
  • Total Posts: 42862
  • Total Topics: 16071
  • Online Today: 1172
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)









Post reply

Name:
Email:
Subject:
Message icon:

Verification:
Type the letters shown in the picture
Listen to the letters / Request another image

Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

shortcuts: hit alt+s to submit/post or alt+p to preview


Topic Summary

Posted by: Samker
« on: 22. January 2009., 13:54:11 »



Social engineering autoplay tricks work on early versions of Windows 7 as well as Vista, according to tests by security researchers.

As well as spreading by exploiting a weeks-old Microsoft vulnerability, the Conficker (Downadup) worm attempts to spread across network shares and to infect removable drives, using a special malformed autorun.inf file.

The use of a clever social engineering ruse means that users plugging an infected drive (such as a USB drive) into a Windows Vista machine might well be lulled into the idea they are clicking on a link that simply opens a folder, rather than actually running the worm's viral payload.

The same trick, first noticed by researchers at the Internet Storm Centre on Vista, also works on beta versions of Windows 7, researchers at F-secure have discovered.

Windows 7 is still in development, so there might still be time to modify how AutoPlay works in order to limit the scope for social engineering attacks. Conficker will surely not be unique in exploiting the ruse to trick users, so a change would surely be welcome.

(The Register)
Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising