Microsoft 9-Year-Old Security Exploit Still Working
The flaw found in the malware ZLoader can crop up in all types of criminal hacking actions, which can be to steal your email or banking password or just to get other sensitive data. It was well known this Zloeader exploit, however, hackers have fine-tuned the aspect of the method a bit and infected about 2,200 people.
The trick is what the good old Indian technical support call center use, and that is to make you install a support software to connect to you remotely. In this case, it was Atera. Nothing new there really, but to manage the exploit, the hackers used multiple pieces of a signed DLL by Microsoft to achieve the goal of compromising the machine.
It’s thought we could see more of this type of attack on Windows, as many industry experts saw WIndows isn’t as secure as Mac or Linux. Microsoft, although has a patch, has blamed the users for the lack of implementation of the patch. A bit strange, when you think they could make it a part of a larger security OS update.
If you want to find out more about what has been found out about this attack read more here.