4 ms·
Is this backdoor patched? And deliberate by Microsoft?
by notlukesky 4y ago
Is this backdoor patched? And deliberate by Microsoft?
- CSMastermind 4y agoNo and no? Unless I'm _really_ misreading the article or your comment I think you're misinterpreting what's happening here. IIS a webserver that gets packaged with most versions of Windows. Once attackers gain access to a system through some exploit or another they're leveraging IIS to create a persistent and alternative entry point into the system (a "backdoor"). SessionManager is the name of one piece of malware that does this but it's emblematic of a recent trend of using IIS once you gain access to a system. There's nothing to be patched because there's nothing built into IIS and it's not deliberate by Microsoft in the way that "Increase in Android Malware" wouldn't be deliberate by Google.
- notlukesky 4y agoThanks for clarifying.
- nix23 4y agoYou can be sure that Microsoft has no deliberate backdoors in it's products. However the 3-letter agencies have enough zero-day's in their pipeline...probably even more for linux then windows nowadays's.
- NGRhodes 4y agoAnd also Microsoft have historically (currently ?) just given access to user data of various products of theirs.