Symantec Reports Spate of Attacks Via Recent Windows Flaw

Surprised Giraffe writes "Symantec is warning of a sharp jump in online attacks that appear to be targeting a recently patched bug in Microsoft's Windows operating system, an analysis that some other security companies disputed. Symantec raised its Threat Con security alert level from one to two because of the attacks, with two denoting 'increased alertness.' The attacks spotted by Symantec target a flaw in the Windows Server Service that Microsoft says could be exploited to create a self-copying worm attack."

Comments

From TFA...

[TheNecromancer]

Arbor Networks disputed Symantec's interpretation, saying, "we're not seeing this rise, not on TCP port 445 and not on TCP port 139. Looking over the last month we don't see this rise in MS08-067 attacks that would raise any alarms for us," in a Friday blog posting.

Both McAfee and Microsoft echoed those sentiments.

Seems like a shameless plug for Symantec to "look better" than their competitors. Crying wolf here won't get them the additional sales they think they will get.

According to a leaked internal Symantec memo

[neonux]

The 'levels' are :

1 - Normal alertness
2 - Increased alertness
3 - ???
4 - PROFIT !!!