Guess who's addicted to GitHub, busy on Slack, stuck in 2015? No, not another hipster: It's the Slub backdoor malware A new malware strain tapped into GitHub posts and Slack channels to siphon precious data from infected Windows PCs, it is claimed. Researchers at Trend Micro have dubbed the malware "Slub", a mash-up of the names of the two services the software nasty apparently used to obtain instructions from its masterminds and exfiltrate …
It's interesting that such a professional and targeted attack would use such old exploits to infect its victims. That it was successful at all is yet another sad reminder of how piss-poor non-technical user's patching processes are.
I hate the way Windows 10 forcibly updates itself but in the grand scheme of things it's probably doing more good than harm if attacks like these can succeed due to lack of patching.
While I may bitch about starting Firefox and Chrome and seeing nothing for a minute while they update, you are correct - automated patching is the only real defense. I wonder what other groups are getting hacked or monitored by this approach - we've got a lot of faff running around this month, could there be other fingers in the pie too?
Me? I've stopped reading the News, it's too depressing most of the time.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
