Malware Hijacks Windows Updates

[HardOCP News]

The BBC says there is a new trojan out there that piggybacks on Windows Background Intelligent Transfer Service. Since BITS is part of the operating system, the Trojan can bypass local firewalls without any problem.

At least one program is in circulation that can hijack a key component of Windows Update to introduce malicious software that could be used to hijack a computer. The method bypasses users' firewall, allowing files to download undetected.

 

[GJSNeptune]

Luckily the system has to be infected first, but it's still a bit unsettling.

 

[ICOM]

Where's my Vista security???? OMG!...

 

[defuseme2k]

That would be the UAC asking if you want to install the trojan. The machine has to be infected with that first, or did you not read the article or the news post fully?

 

[Xilikon]

Hopefully, it would be fairly simple to fix BITS to use a whitelist of allowed urls for downloading contents if the malware will tell BITS to go to X site to download more malware.

 

[ICOM]

That would be the UAC asking if you want to install the trojan. The machine has to be infected with that first, or did you not read the article or the news post fully?

I did. I mentioned that originally because I'm curious how many dimwits don't know any better. Of course, I would never imply that Vista users are dimwits.

 

[FlatLine84]

I did. I mentioned that originally because I'm curious how many dimwits don't know any better. Of course, I would never imply that Vista users are dimwits.

No, just more money than brains, or really, really, need to have something new and flashy.