the flame virus

just in case anyone hasn't heard about it.

here's a faq :- http://www.h-online.com/security/features/…py-1587063.html

now i read it used valid microsoft certificates and could spread itself by using windows update.

http://www.h-online.com/security/news/item…te-1604962.html

now my question is this, does anyone else think it was created by microsoft for use by the american government?

Hi Terry it's probably very good at breaking links as well…

mmm that's strange.. links work fine on another forum.

here's the links again.
http://www.h-online.com/security/features/…py-1587063.html
http://www.h-online.com/security/news/item…te-1604962.html



and fixed links in first post, never thought about that till after i made this post.

All working well now!

… created by microsoft for use by the american government?

Highly unlikely, since it compromises Windows Update, aka the "Holy grail"

Windows Update compromised
- http://h-online.com/-1612246
6 June 2012
- https://blogs.technet.com/b/msrc/archive/20…te-rollout.aspx
June 6, 2012 - "… we will continue to evaluate additional hardening of both the Windows Update channel* and our code signing certificate controls…"
* http://forums.whatthetech.com/index.php?s=…st&p=787486
June 8, 2012

> http://forums.whatthetech.com/index.php?s=…st&p=786935
Jun 3 2012

- http://atlas.arbor.net/briefs/index#-2141289419
Severity: Extreme Severity
Published: Monday, June 04, 2012 20:39
This security vulnerability is high risk and should be looked at ASAP by security teams.
Analysis: Due to the risks involved, multiple sources suggest that this issue be mitigated as soon as possible. The vulnerability has already been used in the Flame malware, which has been around for a few years. How many other potential adversaries have found and are leveraging the same security hole for their purposes is an open question.
Source: http://technet.microsoft.com/en-us/security/advisory/2718704

Source: https://isc.sans.edu/diary.html?storyid=13366
Last Updated: 2012-06-05 …(Version: 4)

Source: http://www.wired.com/threatlevel/2012/06/i…-security-fail/
June 1, 2012 Mikko Hypponen, Chief Research Officer F-Secure
___

Flame self-destruct cmd sent …
- http://forums.whatthetech.com/index.php?s=…st&p=787424

.