Attack Pierces Fully Patched XP Machines

kelston · Aug 20, 2004, 03:26 PM

"Security researchers have identified a new version of the Download.Ject attack that is now being used on the Internet and can compromise fully patched Windows XP machines.

The new version of the attack just appeared Thursday afternoon, and while details are still sketchy, experts say its main purpose is to install a back door on compromised PCs. Users victimized by the attack receive an e-mail or an instant message containing a link directing them to a malicious Web page."

Full article: eWeek

icetrey47 · Aug 20, 2004, 04:45 PM

"But machines running SP2 (Service Pack 2) for XP are not vulnerable to the new attack. Larholm added that the vulnerabilities exploited in this attack have been known for some time."

drakesteakn · Aug 20, 2004, 04:59 PM

another reason why microsoft sucks, still flaws

***Zardon*** · Aug 20, 2004, 05:16 PM

Thread title corrected as this has in fact nothing to do with SP2.

The_Neon_Cowboy · Aug 20, 2004, 05:19 PM

Quote:

Originally Posted by drakesteakn

another reason why microsoft sucks, still flaws

If people don't patch it's not MS's fault... People should be useing SP2

eggs420 · Aug 20, 2004, 06:08 PM

They should? It hasn't even been released to WU, please do not tell me you expect more than a minority of XP users to upgrade before that time.

Zelig · Aug 20, 2004, 06:34 PM

Normal users can't be expected to have SP2 yet, since MS has been saying everywhere that the best way to get it is via automatic updates, and it's not available there, or on WU yet.

kelston · Aug 20, 2004, 07:04 PM

Oops, my fault, was trying to submit 2 separate articles, sorry! The other was SP2 related!