IMPORTANT: Windows Update Malware Potential Risk

[BBloke]

Hi All,

I've just read this on BBC website and thought it would be worth posting here:

http://news.bbc.co.uk/go/rss/-/1/hi/tec ... 657677.stm

Virus writers may be able to smuggle malicious files onto a computer using Microsoft's security patch updates, experts say.

At least one program is in circulation that can hijack a key component of Windows Update to introduce malicious software that could be used to hijack a computer.

The method bypasses users' firewall, allowing files to download undetected.

Microsoft said it was aware of reports of the attack.

[DoubleTap]

GREEEEAAAAAAAAT!

Just this morning when I came down to check on a capture, I noticed that there had been an automatic update performed.

[BBloke]

Just to point this out:

A spokesperson for the software giant said: "Microsoft is aware of public reports that Background Intelligent Transfer Service (BITS) is being used by TrojanDownloader:Win32/Jowspry to bypass policy-based firewalls in order to install additional malware.

"The bypass relies on [Jowspry] already being present on the system; it is not an attack vector for initial infection.

Which basically means if you dont do anything to let it in then you wont have a problem.