MS06-040 update



MS06-040 is one of last weeks Windows updates and is the one that was probably the biggest target for “wormable” activity. There’s a good deal of news from over the weekend with regards to this. First: Snort signatures, the MS06-040 exploit was spotted actively “in the wild”, and of course, our perennial friends in the spamming world didn’t waste much time in making use of this one.


The quick turnaround now from vulnerability announcement to the exploit code being rolled up in a usable form REALLY emphasizes how important it is to keep your pc updated. We are in a war – it’s going on all the time and most people don’t notice it (to paraphrase from the recent Dr. Who revival)…. there are a lot of people out there that control a LOT of pc’s. The owners of the pc’s don’t realize it – they think they’ve just got annoying popups, but their computer ceased to be theirs a long time ago and the botnet controllers are eager to keep adding to the size of their army’s.

Why? rent them by the thousands to junk mailers, click fraudsters, illegal content hosting (child pornography/phishing/use your imagination/etc/etc/etc). They can be used to bring a web server to it’s knees silencing companies, or even government sites. They can be used for blackmail. There are a lot of possibilities. The bottom line is there are tens of thousands – possibly hundreds of thousands if not millions of computers out there on the internet owned by botnet herders and they’re always eager to find a way to add to the flock. Every patch day there are possibilities, some of them aren’t too promising, but sometimes there are a few vulnerabilities that are just right and can get rolled into arsenal to “recruit a few more bots.”

It’s interesting to note that in Brian Krebs update to his post on this, there are a number of interesting points – one is that the most recent Microsoft One Care antivirus update that was available for virustotal was almost 10 days old (8/04/06). I wonder if they’ll move towards once a month AV signature updates?….

Related Posts

Blog Traffic Exchange Related Posts
  • Kdirstat to track space hogs I'm putting this under the Windows tech support category because I've used this on a boot cd before to do the same for Windows as I'm about to describe for Linux. I need to clean up and organize my hard drive(s). But when it comes to actually deleting things you......
  • Major botnet building and the massive jump in spam For a few months now (since the demise of bluefrog actually) I've noticed that the level of junk mail has gone up on my own mail server. Yes, I use spamassassin to filter and tag, but the volume of stuff that's tagged has gone up (as well as the volume......
  • Other MS patch news as well as a Yahoo vulnerability? Or lack of currently available patch as the case may be. From the previous link it appears that there was at least one previously announced vulnerability that was not addressed in the recent patch day from Microsoft. From MS... "this is a DoS only issue that was not addressed in......
Blog Traffic Exchange Related Websites
  • Hidden IP Address Easy Information When connecting on the Internet, your property computer is assigned a public Ip. As you visit Websites or other Internet servers, that public Ip is transmitted and recorded in log files kept on those servers. Access logs leave behind a trail of one's Internet activity. When it were possible to......
  • iYogi iYogi is the world’s-fastest growing provider of comprehensive direct-to-consumer and small business remote tech support.With McAfee Sec - UR -rity ... U R at the center. Get Free Tech Support for Installation and Setup iYogi has more than 200,000 consumer and small business customers across four countries for its......
  • Good Advice on Running for Beginners Running is a sport which is easy to get in to. You do not need a lot of specialized equipment to get started. Running for beginners only requires a good pair of shoes and some good advice. This way you can get started off the right way. The most important......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site