Windows shortcut vulnerability with rootkit - detailed video demo by Sophos

An updated video from SophosLabs showing the shortcut vulnerability launching malware on Windows 7. Infection occurs without user interaction. The malware used for the demonstration is W32/Stuxnet-B. More information at http://nakedsecurity.sophos.com/2010/07/17/windows-zero-day-attack-works-on-a...

Category:

Science & Technology

Tags:

• cybersecurity
• windows
• virus
• malware
• shortcut
• lnk
• Sophos
• SophosLabs

[SamyAdel9]

labrat is the coolest logon ever!

[jake2135]

@ThePsychoticScyth396 Lol at your Linux comment. I don't understand how anyone could justify linux not being an operating system. Especially how much it has deviated from unix.

[stuxnettruth]

Stuxnet is a false flag cyber attack launched by Iran to justify a kinetic attack on a third-party nation state. Seek the truth.

[panterml]

@Sketchfactory , yea mee to.. shity manual. ; /

[ThePsychoticScyth396]

@muk546 macs are overrated and they suck when it comes to games (portal lagged like a son of a cock on my bothers mac) and linux isent an operationg system its a mod

[Stasoline]

Has this been patched yet?

[allanonmage]

its the gonasyphaherpaleze of sneakernet!!!

[blacksteel25]

@klemv20 ok well show me since you think it's so easy.

[xbia1]

Sophos's tool only protects against .lnk files, not against .pif files.

[kenpaustin]

Great that Sophos quickly had a signature for the threat, but AV is basically an ineffective, reactive solution for zero-day threats like this. More proactive solutions like Application Whitelisting exist that are proactive and prevent any new code from running, which would have negated this threat and all others like it. Much better fit in closely controlled environments like those that run Siemens Process Control software,. The better solutions also stop in-memory attacks too.