Microsoft reports attacks related to bug already fixed

Microsoft reports attacks related to bug already fixed

Microsoft has confirmed that they are noticing attacks on the Windows operating system which are connected to bugs they have already fixed.

The company is advising that the users should update their copies with the MS08-067 patch if they have not already done so.

Security company Symantec had earlier notified about these attacks.

Microsoft has named this latest malware Conficker.a. Symantec calls it Downadup.

This malware uses a vulnerability present in the Windows Server service.

The company had issued a patch for this outside the Patch Tuesday window which shows how crucial this bug fix is.

Ziv Mador, a researcher with the Microsoft Malware Protection Center said in a statement: “It is also interesting to note that the worm patches the vulnerable API in memory so the machine will not be vulnerable anymore. It is not that the malware authors care so much about the computer, want to make sure that other malware will not take it over, too.”

Checkout: MS08-067