Go homepage(回首页)
Upload pictures (上传图片)
Write articles (发文字帖)

The author:(作者)delv
published in(发表于) 2014/1/8 7:47:56
Microsoft， XP 0 vulnerabilities caused Syria civil war

Microsoft, XP 0 vulnerabilities caused Syria civil war-Syria war, XP-IT 0 vulnerability information Microsoft, XP 0 vulnerabilities caused Syria civil war

Last year, loopholes in Microsoft XP and Server 2003 system frenzy hacker, in the middle of the central city to 28 foreign embassies to launch targeted attacks, even in Syria during the civil war network to war once.

In June of 2013, foreign media exposure of Microsoft XP and Server 2003 0 vulnerabilities on the system, a hacker could use this loophole can be setup without user's local authority, change, or delete data, you can even create administrator account. Microsoft issued a notice at that time, said it was taking steps to protect the interests of consumers, but soon erupted in the Middle East a large 0 exploit.

Specific forms of attacks, mainly in the blank email communication, subject lines and attachment names refer to Syria heading the civil war, attracting user tries to open a message.

Trend Micro security according to foreign manufacturers to introduce, vulnerabilities tags to higher than normal levels of cybercrime, likewise the vulnerability be exploited by hackers primarily engaged in anti-reconnaissance technologies.

So far, Microsoft has not made any public comment.

微软中枪，XP零日漏洞引发叙利亚内战 - 叙利亚内战,XP零日漏洞 - IT资讯
微软中枪，XP零日漏洞引发叙利亚内战

去年，微软XP和Server 2003系统上的漏洞被狂热的黑客利用，在中东的中心城市向28个外国大使馆发动目标攻击，甚至在叙利亚内战期间也一度开展网络对抗战。

在2013年的11月份，国外媒体就曝光了微软XP和Server 2003系统上的零日漏洞，黑客可以使用这个漏洞不经用户本地授权即可安装程序，更改或者删除数据，甚至可以创建管理员权限的账户。当时微软就发出公告，称正在采取措施保护用户权益，但是不久，中东地区就爆发了大规模的零日漏洞攻击。

具体攻击形式主要以空白电子邮件传播为主，其主题行和附件名都引用叙利亚内战的标题，吸引用户尝试打开邮件。

据国外的趋势科技安全厂商介绍，这次漏洞标记为高于普通等级的网络犯罪行为，同样该漏洞主要被黑客利用从事反侦测技术。

截至目前，微软没有做出任何公开评论。

赞