You are here: News > News > Windows 7 still cannot handle popular hack
| » IT Security NEWS |
| |
| » 06 May 2009 |
| Windows 7 still cannot handle popular hack |
Net security gurus claim that there is one thing the Windows 7 failed to do: it failed to learn from mistakes.
They report that an almost final version of Windows 7 keeps an early feature of Windows NT: it speeds up a popular hacker trick.
Windows 7 RC fails to include the solution for an old vulnerability in Windows Explorer. Just like earlier released versions of Windows (yes, even windows NT), Windows Explorer in Windows 7 conceals extensions of file types. This poses a great threat to users, since virus creators take advantage of this lack to make executables pass of as document files.
It works this way: if LOVEBUG.EXE is renamed to LOVEBUG.TXT.EXE or LOVEBUG.JPG.EXE, Windows automatically conceals the file type extension -- in these cases, the last file type extension: .EXE -- from the virus' filename. To trick more people, VXers likewise replace the executable's icon so that it will appear as if it's an innocent text file or image.
The net security firm F-secure revealed that the Windows 7 RC does the same mistake its predecessors has committed.
Hopefully, Microsoft can (and would) still resolve this pending threat as soon as the full version of Windows 7 is made available in late October. There were a lot of downloads of Win 7 RC since it was released last Tuesday. People who wish to get a hold of the software from other sources are apprised of news that some of the links to "unofficial download sites" were in reality leading to sites that exploit code and disseminate malware. |
|