Internet Explorer 0-day Attacks On US Nuke Workers Hit 9 Other Sites 157
A reader writes with an excerpt from Ars Technica: "Attacks exploiting a previously unknown and currently unpatched vulnerability in Microsoft's Internet Explorer browser have spread to at least nine other websites, including those run by a big European company operating in the aerospace, defense, and security industries as well as non-profit groups and institutes, security researchers said. The revelation, from a blog post published Sunday by security firm AlienVault, means an attack campaign that surreptitiously installed malware on the computers of federal government workers involved in nuclear weapons research was broader and more ambitious than previously thought. Earlier reports identified only a website belonging to the US Department of Labor as redirecting to servers that exploited the zero-day remote-code vulnerability in IE version 8.
... 'The specific Department of Labor website that was compromised provides information on a compensation program for energy workers who were exposed to uranium,' CrowdStrike said. 'Likely targets of interest for this site include energy-related US government entities, energy companies, and possibly companies in the extractive sector. Based on the other compromised sites other targeted entities are likely to include those interested in labor, international health and political issues, as well as entities in the defense sector.'"
Re:Hold Microsoft Responsible (Score:5, Interesting)
Exactly this.
Some of us are stuck with legacy systems, built with legacy tools and the original developers are long, long gone. While we try to unwind the horrible spaghetti mess that is our core business software, we have to make due with Win-XP VMs and all sorts of neat tricks to keep the rickety shit from collapsing in on itself.
(Incidently, if any of you reading this worked at Borland/Inprise in the late nineties: hello how ar... FUCK YOU! and fuck your ridiculous fucking desktop database fucking crap. You fucking morons have no fucking clue how to nail a board onto another board, and you should all be lined up and punched in the dick. /rant)
Re:Hold Microsoft Responsible (Score:0, Interesting)
We all voted the dumb fucks into government. Where is the Ex-Google engineer in charge of government network security ? Where is he clamping down massively on shitty IT security ?
I predict that 100% of western secrets will be stolen over some sort of network over the next couple of years. Our leaders are simply the dumbest of the dumb and they compete against a team of engineers and other hard scientists at the top of China. That'*s like me competing in a physics test with my two-year old daughter.
But hell yeah, Americans, you have made these "social scientists" fuck up my country, now eat your own medicine with your socialworker-in-chief and the previous fuck who was in the pay of the oily retards of Arabia.