Security Alerts & News
by Tymoteusz A. Góral

History
#917 Windows BITS ‘notification’ feature used to deliver malware
Attackers have found a new way to exploit the Widows Background Intelligent Transfer Service (BITS) which is being used to infect and reinfect targeted PCs with malware even after the initial infection has been removed.

According to security researchers at Dell SecureWorks, attackers are exploiting a lesser-known BITS “notification” feature. The feature allows attackers to create a re-occurring task to download and install malware even after the original malware is extracted.

BITS is used by Windows Update and third-party software for application updates. The service has a long history of being abused by attackers dating back to 2007. And even up until today, BITS is still an attractive feature for hackers because the Windows component includes the ability to retrieve or upload files using an application trusted by host firewalls, said Matthew Geiger, Sr. security researcher for SecureWorks’ Counter Threat Unit.
Read more
#927 Google patches high severity browser PDF vulnerability
#926 More corporate shared folders in cloud filled with malware, research finds
#925 CryptXXX ransomware jumps from Angler to Neutrino exploit kit
#924 A hacker claims to be selling millions of Twitter accounts
#923 Watch the full episode: 'State of Surveillance' with Edward Snowden and Shane Smith (VIDEO)
#922 Vawtrak banking malware – know your enemy
#921 Slicing into a Point-of-Sale botnet
#920 Hackers could have changed Facebook Messenger chat logs
#919 University pays almost $16,000 to recover crucial data held hostage
#918 uTorrent forums hacked, passwords compromised
#917 Windows BITS ‘notification’ feature used to deliver malware
#916 Belgium tops list of nations most vulnerable to hacking
#915 Bitdefender finds eavesdropping vulnerability in public cloud
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12