Malware Hijacks Windows Update

clickclickdrone writes "The BBC are reporting a new piece of malware is in the wild that can hijack Windows Update's functionality and bypass firewalls allowing it to install malicious code on users PCs. The new code was discovered by Frank Boldewin in an email. The attack utilizes the BITS system."

Maybe we should call it...

[Cytlid]

...son of a BITS.

Typical Microsoft response

[Black Parrot]

From TFA:

However, Microsoft said that for BITS to be exploited, machines first had to become infected with the trojan that Mr Boldewin discovered.

That makes me feel so much safer.

Your machine has just been updated

[liledevil]

14 new virusses have just been installed
please restart your machine to become a zombie

Not one the the better MS Patents...

[ITMagic]

Ah! One of the many Microshite's patents that didn't manage to make it into the Linux sourcecode. Perhaps Novell could implement this feature?

Security quiz linked from TFA

[AmIAnAi]

Linked off TFA is a quiz checking readers' knowledge of computer security issues. I just love the first answer for question 10:

What is a DDoS attack?

A: Guerilla activism by open source software advocates in which they uninstall Windows on a PC and replace it with Linux

That's one botnet I'd happily join

Windows is safe!

[Anonymous Coward]

Hi,
I have my own awesome blog whose url I certainly don't need to post here since I expect you all to know it already.

I just talked with my friends at Microsoft and they told me that

"Windows is safe!"

and it seems ridiculous to care about such small issues when 9/11 was only 6 years ago. You people should really step aside and look at the things from another perspective.

Maybe from above like the Lord does.

I rather go to church and pray to the Lord for less terrorists than being part in this smear campain against the blessed world leader of IT.

Bill and Melinda think of the children. Do YOU?

Re:Typical Microsoft response

[SparkyFlooner]

..well...what SHOULD the response have been? "Microsoft has also set up a military strike team that can travel through time, stopping virus and trojan developers before they infect the future."

WGA

[Anonymous Coward]

The good news is that it only installs the malware if you're running Genuine windows.

click here

[gEvil (beta)]

Is your Windows Update not infected yet? Click here [127.0.0.1] to infect it!

Let me be the first to say...

[SadGeekHermit]

If you were all using Linux or OS/X, you could watch this catastrophe with detached amusement instead of butt-clenching fear.

Me, I'm relaxed and enjoying a soda.

Re:Typical Microsoft response

[Kynmore]

Except for the time travel part, I wonder how far off we are from seeing corporate SWAT teams go in for the kill on people who fux up their products, steal insider info, etc. Rise of the Megacorps!

Nice work! A program to infect an already ...

[figleaf]

...infected machine!! Man who knew that would be even possible?

Microsoft's Makes a Buck, However

[VE3OGG]

Dear Sirs,

Your Trojan, named 1337-5ki11z, violates 387 Microsoft patents, included patent 666-1345-876-666 ("screwing the user over"). We do not wish to actually pursue legal action, but would rather license our Windows Update APIs to you for the paltry sum of 100.00 (per infection).

Thank You

Kindly,

The MS Legal Eagles

Re: Windows is safe!

[Anonymous Coward]

Well, He might be omnipotent enough to create logical fallacies and Creationists, but that doesn't mean He's powerful enough to fix Windows.

Re:Typical Microsoft response

[HTH NE1]

"Microsoft has also set up a military strike team that can travel through time, stopping virus and trojan developers before they infect the future."

They call it ConunDRM.

Re:but does it support Vista?

[jackharrer]

But does it run on Linux???

Re:Your machine has just been updated

[thestudio_bob]

14 new virusses have just been installed
please restart your machine to become a zombie

Accept or Deny?

This will never get old...

Re:Typical Microsoft response

[Anonymous Coward]

Would you like to hijack BITS? Cancel or Allow?