Microsoft Shortcut .lnk vulnerability caught on video

[newton3010]

Posted a year ago and yet this still works.... :( yay Microsoft???

[TheDirtyTeddys]

JUST BUY A FUCKING MAC!!

[PopoXReturnz]

@TheDirtyTeddys

Just buy a fuck off.

[stuxnettruth]

Stuxnet is a false flag cyber attack launched by Iran to justify a kinetic attack on a third-party nation state. Seek the truth.

[coo446]

Wouldnt ur Antivirus stop them anyways?

[yoshibomber]

@coo446 no:( it happened to me:(

[FirefoxReview]

Oh god thats not good. Microsoft better release an update.

[mrbest20]

@FirefoxReview  or just buy avira prenium security suite.

[FirefoxReview]

@mrbest20 lol yea

[mrbest20]

@FirefoxReview hehe :D

[antivirushelp]

But what is related with .LNK Files ?

[BacklTrack]

@antivirushelp I think when plugged in, the autorun.inf executes the shortcut or the .lnk which holds the info which executes the rootkit. I may be wrong, but hell, it's a guess.

[SophosLabs]

@BacklTrack @antivirushelp The flaw in Windows allows a .lnk (Shortcut) file to execute arbitrary files. You don't need to click them, and autorun and autoplay can be disabled and you are still at risk. Simply opening a location that contains a malicious .lnk can infect your computer. Check out the blog for more details

[BacklTrack]

@SophosLabs I checked the blog, but i cannot find it. And yes, I'm aware that you don't have to actually click on the .lnk file, because then it wouldn't be much of an exploit. But what exactly does windows do when it located a shortcut file? I'm guessing this is how it's activates. And also, is there shellcode injected into the .lnk? Or am I totally off here

[mrbest20]

@BacklTrack avira prenium security suite have a new system that prevents autorun

[gaaraman082]

@antivirushelp Yeah this exploit is just rigging up your USB or an infected USB to execute a program. This exploit has been around sience the days of the first USB sticks.