Microsoft, Worms and Cybercrooks
(20.08.2005)

This week has seen Microsoft under attack again with the Zotob.A and Zotob.B worms affecting computers using Microsoft's Windows 2000.

Initially, the worms created very little damage, but they can infect unpatched Windows 2000 systems that aren't protected by a firewall and then start searching for new computers to compromise.

The worm exploits a hole in the plug-and-play feature in the Windows operating system and appeared just days after Microsoft provided a "fix" for this.

A number of media outlets were affected by the worm such as: CNN, ABC and The New York Times. One forum was critical of the IT people at CNN for not patching their computers before the worm hit.

Although the various worms have all been exploiting the same security hole, some versions appear to change the effects of earlier worms. Some have suggested that there is a "control" battle in force as different "cybercrooks" fight to obtain the largest network of infected computers.

Microsoft have also received some criticism over a new peer-to-peer networking feature on the future Windows Vista system. This would allow other Windows users to automatically connect without a central server. In the Beta version this feature is turned on by default (although the final version will be different) and this opens up potential security problems. Providing the security aspects of this feature can be "ironed out", it does have some potential.

Unfortunately, the problem with worms, viruses, spam and numerous other areas, continue to make it increasingly difficult on the internet. Patching up holes in the defence system may reduce the problem in the short term, but a more long term solution must be found soon, before we all go crazy and revert back to more traditional methods of communication.

 

News Feed