Flame Malware Hijacks Windows Update

[grandpaflo]

= Flame Hits Windows Update: 7 Key Facts
Flame's use of spoofed Microsoft security certificates will likely be mimicked by sophisticated malware writers to craft widespread attacks, experts say.
- http://www.informationweek.com/news/security/cybercrime/240001490

= Flame Malware Hijacks Windows Update
- http://it.slashdot.org/story/12/06/05/1638228/flame-malware-hijacks-windows-update


related -

- http://www.securityweek.com/flame-malware-hijacks-windows-update-mechanism
- http://news.slashdot.org/story/12/06/04/1211206/microsoft-certificate-was-used-to-sign-flame-malware
- http://blogs.technet.com/b/msrc/arc...704-update-to-phased-mitigation-strategy.aspx
- http://www.net-security.org/malware_news.php?id=2138

 

[SecurityTheatre]

Microsoft is working on a hardened version of MSUpdate. Additionally, they revoked the trusted certificates that Flame used.

Still, it's something to keep an eye on.