3 ms·
Not really the article's fault. As they state near the end, Microsoft themselves didn't provide this info. > Thursday’s [Microsoft] post doesn’t explicitly say
by sohkamyung 6y ago
Not really the article's fault. As they state near the end, Microsoft themselves didn't provide this info.
> Thursday’s [Microsoft] post doesn’t explicitly say what, if any, user interaction is required for infections to occur. It’s also not clear what effect defenses like User Account Control have. Microsoft makes no mention of the attack hitting browsers running macOS or Linux, so it's likely this campaign affects only Windows users. Microsoft representatives didn’t respond to an email asking for details.
- upofadown 6y agoIt is still the articles fault for existing at all. The behaviour of the payload is not very interesting or helpful and you have to read almost the entire article to discover that you have wasted your time.
- throwanem 6y agoThat's fairly typical of a Dan Goodin article. The best you can really hope to do is pick out some search terms that'll find something actually useful, like the source material in this case: https://www.microsoft.com/security/blog/2020/12/10/widespread-malware-campaign-seeks-to-silently-inject-ads-into-search-results-affects-multiple-browsers/ https://www.microsoft.com/security/blog/2020/12/10/widesprea...
- gruez 6y ago>It’s also not clear what effect defenses like User Account Control have Obligatory: UAC is not a security feature: https://devblogs.microsoft.com/oldnewthing/20160816-00/?p=94105 https://devblogs.microsoft.com/oldnewthing/20160816-00/?p=94... And considering that UAC only protects against admin (aka root) access, this xkcd applies https://xkcd.com/1200/ https://xkcd.com/1200/