MS06-040 update



MS06-040 is one of last weeks Windows updates and is the one that was probably the biggest target for “wormable” activity. There’s a good deal of news from over the weekend with regards to this. First: Snort signatures, the MS06-040 exploit was spotted actively “in the wild”, and of course, our perennial friends in the spamming world didn’t waste much time in making use of this one.


The quick turnaround now from vulnerability announcement to the exploit code being rolled up in a usable form REALLY emphasizes how important it is to keep your pc updated. We are in a war – it’s going on all the time and most people don’t notice it (to paraphrase from the recent Dr. Who revival)…. there are a lot of people out there that control a LOT of pc’s. The owners of the pc’s don’t realize it – they think they’ve just got annoying popups, but their computer ceased to be theirs a long time ago and the botnet controllers are eager to keep adding to the size of their army’s.

Why? rent them by the thousands to junk mailers, click fraudsters, illegal content hosting (child pornography/phishing/use your imagination/etc/etc/etc). They can be used to bring a web server to it’s knees silencing companies, or even government sites. They can be used for blackmail. There are a lot of possibilities. The bottom line is there are tens of thousands – possibly hundreds of thousands if not millions of computers out there on the internet owned by botnet herders and they’re always eager to find a way to add to the flock. Every patch day there are possibilities, some of them aren’t too promising, but sometimes there are a few vulnerabilities that are just right and can get rolled into arsenal to “recruit a few more bots.”

It’s interesting to note that in Brian Krebs update to his post on this, there are a number of interesting points – one is that the most recent Microsoft One Care antivirus update that was available for virustotal was almost 10 days old (8/04/06). I wonder if they’ll move towards once a month AV signature updates?….

Related Posts

Blog Traffic Exchange Related Posts
  • Major botnet building and the massive jump in spam For a few months now (since the demise of bluefrog actually) I've noticed that the level of junk mail has gone up on my own mail server. Yes, I use spamassassin to filter and tag, but the volume of stuff that's tagged has gone up (as well as the volume......
  • Other MS patch news as well as a Yahoo vulnerability? Or lack of currently available patch as the case may be. From the previous link it appears that there was at least one previously announced vulnerability that was not addressed in the recent patch day from Microsoft. From MS... "this is a DoS only issue that was not addressed in......
  • Kdirstat to track space hogs I'm putting this under the Windows tech support category because I've used this on a boot cd before to do the same for Windows as I'm about to describe for Linux. I need to clean up and organize my hard drive(s). But when it comes to actually deleting things you......
Blog Traffic Exchange Related Websites
  • Fast WordPress Hosting: Things You Should Check If you're starting a new wordpress blog and want to get the best and fast wordpress hosting service, here are some things you should check before signing up with any web hosting company. Fast Wordpress Hosting Server Uptime Of Hosting This is the first thing you should check as you......
  • Tech Support - Funny Video Series While surfing through Youtube, I stumbled across this fun-filled tech support video series. All of the videos are sure to give you good amount of chuckle. I liked all of them, but first one is my favorite. Surely a stress buster after a bad day in office :) Enjoy! Tech......
  • Good Advice on Running for Beginners Running is a sport which is easy to get in to. You do not need a lot of specialized equipment to get started. Running for beginners only requires a good pair of shoes and some good advice. This way you can get started off the right way. The most important......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site