Malicious Microsoft-signed Windows drivers wielded in cyberattacks
Windows kernel vulnerability disclosed by Google's Project Zero after bug exploited in the wild by hackers
Dubbed the Bring Your Own Vulnerable Driver approach, a miscreant with sufficient privileges on a system loads a legit, non-malicious signed Windows driver known to contain vulnerabilities that can be exploited to switch off features and fully compromise the PC. Attempts to load the driver failed, we're told, and left behind files that the researchers could analyze.
SentinelOne's SentinelLabs unit said it found malware that includes STONESTOP, which is used to load and install POORTRY. The analysts detected three versions of this malicious code stack, with two versions of POORTRY signed through Microsoft.
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Microsoft isn't the only one fixing bugs on Patch TuesdayMicrosoft isn't the only one fixing a bug that's being exploited this Patch Tuesday
Read more »
Microsoft has reportedly offered Sony the rights to Call of Duty on PS PlusThe reported offer has been made on top of an as-yet not accepted deal to keep the CoD franchise on PlayStation consoles for 10 years
Read more »
Microsoft said to be trying to stop EU Teams antitrust probeSoftware behemoth reportedly wants a chat with the regulators – on the other side of the pond this time
Read more »
New weekly Xbox Game Pass Quests are now live for another 70 Microsoft Reward PointsThe new weekly Xbox Game Pass quests are now live. We've got the roundup of every quest on offer, how to complete them, and how many Microsoft Rewards Points you'll get for doing so.
Read more »
Microsoft reportedly offered Sony the option to put Call of Duty on PlayStation PlusMicrosoft reportedly offered Sony the option to add Call of Duty to its PlayStation Plus subscription service as part o…
Read more »
Microsoft offered Sony Call of Duty on PlayStation Plus — reportMicrosoft has reportedly offered Sony the option to put Call of Duty on PlayStation Plus in a bid to see regulators approve Microsoft's $69 billion acquisition of Activision Blizzard.
Read more »