Uptick in Windows attacks reported

Cnet ^ | 09/01/2006 | Joris Evers

[Panerai]

Several security experts are warning of increased cyberattacks targeting Windows PCs, but Microsoft says all is calm on the attack front.

The SANS Internet Storm Center, Symantec, McAfee and several other security companies are warning of a new worm that wriggles into Windows PCs by way of a security flaw for which Microsoft issued a patch with security bulletin MS06-040 on Aug. 8.

On Thursday, Symantec raised its ThreatCon to Level 2, which means an outbreak is expected. In an alert to customers, the Cupertino, Calif.-based company said it is seeing "ongoing and frequent attacks" that utilize the MS06-040 flaw. There are now six variants of malicious code that exploit the vulnerability, Symantec said.

"The potential impact of these threats is exaggerated due to reports of successful compromise of Windows NT systems, for which there is no patch available," Symantec said in its alert. Windows 2000 and Windows XP are also at risk, according to Symantec.

Symantec was joined in its alert by the other security watchers. The SANS Internet Storm Center, which monitors network threats, noted on its Web site that several people had reported increased malicious activity. Analysis of the threat, however, found that attacks should be "relatively easy to catch." Most antivirus software detects the bad code.

Microsoft, however, has not seen an increase in malicious activity associated with MS06-040, a security hole in a Windows component related to file and printer sharing.

[MissTargets]

I have not been able to access their home page, for a few hours. Wonder if this is why.