I don't know about you, but I personally find it so discouraging to find out that our PCs are under
constant attack. It seems that Microsoft has identified a mounting threat that could prove to be unstoppable.
Microsoft Corp. security researchers are warning about a new generation of powerful system-monitoring programs, or "rootkits," that are almost impossible to detect using current security products and could pose a serious risk to corporations and individuals.
It would seem that the hackers are managing to stay one step (or in this case it sounds like many, many steps) ahead of the defences being offered. This new generation of virus and spyware programs can basically run invisibly.
In particular, some newer rootkits are able to intercept queries or "system calls" that are passed to the kernel and filter out queries generated by the rootkit software. The result is that typical signs that a program is running, such as an executable file name, a named process that uses some of the computer's memory, or configuration settings in the operating system's registry, are invisible to administrators and to detection tools, said Danseglio.
The other disturbing aspect of the article is who is potentially involved in this new online threat.
The increasingly sophisticated rootkits and the speed with which techniques are migrating from rootkits to spyware and viruses may be the result of influence from organized online criminal groups that value stealthy, invasive software
So my question to you, isn't it time you moved to a Mac or Linux already?
For the complete article, click here.
Comments