News

Windows Hotfix System Used to Install Malware

When it comes to antivirus software, we often think of the big independent companies such as Symantec and McAfee at the cost of forgetting built in anti-virus like that provided by Windows Defender. It would now seem that the Microsoft Window’s Defender Advanced Threat Hunting team has found a group of hackers who used Window’s own hotfix system against their targets.

The team wrote about a group they have started to call PLATINUM. The recent focus has been on groups that have selective targets and unfamiliar patterns, both features which make their malware hard to detect. PLATINUM’s targets were South East Asia companies, with a large amount of their targets being based in Malaysia.

Over half of the attacks were aimed at government organisations and even internet service providers, but rather than the traditional financial gain that these hacks come with but instead seem to be focused on economic espionage.

PLATINUM has used everything from self-deleting malware to malware that restricts its network traffic, limiting its interactions using certain times and dates to transmit its data. In their attempts to track down and identify the group one of Windows own systems were used to install the malware. In order to ensure its software is up to date, Windows has a hotfix solution, enabling the dynamic installation of malware on everything from Windows server 2003 to Windows 7.

The hotfix ability was removed in Windows 8 and subsequent OS’s stating that the few reboots the hotfix ability prevented weren’t worth the risk that it exposes.

Gareth Andrews

Disqus Comments Loading...

Recent Posts

Nvidia’s GeForce RTX 5090 Possible Price Revealed

According to a new report, the GeForce RTX 5090 GPU will be very expensive. It…

7 hours ago

AMD Krackan Processor with 6 Zen 5 and Zen 5c Cores for Budget AI Laptops Leaked

A new AMD processor in the form of an engineering model has been leaked in…

7 hours ago

SK Hynix Begins Production of First 321-Layer NAND Chips

SK Hynix has claimed to be the first company to mass-produce 321-layer NAND memory chips.…

8 hours ago

Trust Gaming GXT 609 Zoxa 2.0 PC Speakers

SOUNDS GREAT – Full stereo sound (12W peak power) gives your setup a booming audio…

12 hours ago

PowerA Wired Controller for Nintendo Switch

Special Edition Yoshi design Ergonomic controller shape with Nintendo Switch button layout Detachable 10ft (3m)…

12 hours ago

Logitech G Saitek PRO Flight Rudder Pedals

Fluid Motion: These flight rudder pedals are smooth and accurate that enable precise control over…

12 hours ago