Slashdot Mirror


Microsoft Says Russia-Linked Hackers Are Exploiting Newly Discovered Flaw In Windows OS (reuters.com)

An anonymous reader quotes a report from Reuters: Microsoft Corp said on Tuesday that a hacking group previously linked to the Russian government and U.S. political hacks is behind recent cyber attacks that exploit a newly discovered flaw in its Windows operating system. Microsoft said that a patch to defend Windows users against this sort of attack will be released on Nov. 8. The software maker said in an advisory on its website there had been a small number of attacks using "spear phishing" emails from a hacking group known Strontium, which is more widely known as "Fancy Bear" or APT 28. A U.S. intelligence expert on Russian cyber activity said that Fancy Bear primarily works for or on behalf of the GRU, Russia's military intelligence agency, which U.S. intelligence officials have concluded were responsible for hacks of Democratic Party databases and emails. Microsoft said the attacks exploited a vulnerability in Adobe Systems Inc's Flash software and one in the Windows operating system. Adobe released a patch for that vulnerability on Monday as security researchers with Google went public with details on the attack.

65 of 111 comments (clear)

  1. Release it sooner? by mcolgin · · Score: 1

    I know that's a crazy idea, but why wait? Get that shit fixed!

    --
    I made this: http://www.bpftpserver.com
    1. Re:Release it sooner? by darkain · · Score: 2

      Welcome to "Patch Tuesday" syndrome, horribly amplified by the fact they're now doing a unified single update per month of everything all rolled up into one. You get an all-or-nothing patching system, regardless of how much it fucks up your computer in the process!

    2. Re:Release it sooner? by techno-vampire · · Score: 2

      If we didn't know it already, here's proof that to Microsoft, sticking to a monthly patch schedule is more important than keeping their customer's computers safe. And, when it comes down to it, why should they do it differently, when we all know that there are millions of people out there shelling out good money for the Latest and Greatest version of every Microsoft product, even when they know that bugs and vulnerabilities won't be patched in a prompt and timely manner. Say what you want about Linux not being bug proof, but at least the various distros release patches as soon as they're available, rather than holding them back until the next monthly patch-fest.

      --
      Good, inexpensive web hosting
    3. Re:Release it sooner? by zlives · · Score: 1

      Nov. 8th: because only after all efforts to manipulate elections have been completed.

    4. Re:Release it sooner? by Atzanteol · · Score: 1

      Some people like to test their fixes a bit before releasing them to production systems.

      --
      "Ignorance more frequently begets confidence than does knowledge"

      - Charles Darwin
    5. Re:Release it sooner? by crimson+tsunami · · Score: 1

      But do any of those people work for Microsoft?

    6. Re:Release it sooner? by crimson+tsunami · · Score: 1

      Such a coincidence that the patch will be ready and fully tested on a certain date.
      Windows complexity is perfectly balanced around some magic Tuesday.

    7. Re:Release it sooner? by epyT-R · · Score: 1

      Why are these hosts even on the public network in the first place?

  2. Zee Germans! by geek · · Score: 3, Insightful

    Is it just me or is everything linked to fucking Russians these days? Reminds of of the old chant "Zee Germans are coming!"

    1. Re:Zee Germans! by Mass+Overkiller · · Score: 2

      People are getting bored with ISIS this and that so now back to the 60's with Zee Commies!

    2. Re:Zee Germans! by amiga3D · · Score: 1

      It's always someone. It seems we've always been at war with East Asia.

    3. Re:Zee Germans! by Anonymous Coward · · Score: 1

      Possibly in part because Russia threatens (And regularly delivers) to expose the widespread computer illiteracy of American officials.

    4. Re:Zee Germans! by phantomfive · · Score: 1

      Democrats need a bogeyman to make you afraid so you'll vote for them. Grew up during the Cold War and this tactic was used all the time.

      I was about to assert that it was the Republicans who used this tactic in the old days, but now that I think of it, this was made by a democratic candidate.

      --
      "First they came for the slanderers and i said nothing."
    5. Re:Zee Germans! by rholtzjr · · Score: 1

      ZOMG, dang ruskies!!!

      Seriously, while it may be them, doesn't it seem that ALL flaws recently point to them exploiting. Heck, I would not be surprised if someone in China OR the NSA is saying "Watch this, we can make them think the Russians did it".

    6. Re:Zee Germans! by Anonymous Coward · · Score: 1

      What do you mean "everything"? It's always the same damn thing. Do you mean you hear the word "Russia" a lot? Blame dumbass Trump.

    7. Re:Zee Germans! by unixisc · · Score: 1

      Actually, you can extend that to cover Slavs - any Slavs that the Western political establishment doesn't like. Like it's okay to dump on the Russians, Serbs, Romanians, Bulgarians, Belarussians and any Slavic group perceived to be anti-Muslim.

    8. Re:Zee Germans! by Maltheus · · Score: 1

      It's called propaganda. The people are becoming too uppity on both sides of the aisle. Time to remind America why they need Washington.

    9. Re: Zee Germans! by Type44Q · · Score: 1

      We've always been at war with Microsoft.

    10. Re:Zee Germans! by Zontar+The+Mindless · · Score: 1

      Romanians aren't Slavs. And both Romania and Bulgaria are EU members. Serbia's a candidate member.

      --
      Il n'y a pas de Planet B.
    11. Re:Zee Germans! by bongey · · Score: 1

      No just BeauHD shilling for Hillary on ./. His twitter feed, "Trump is a saggy sack of shit. If any one of you is even remotely considering voting for him this November, please unfollow me. "
      Fucks sakes he posted a Trump bashing tech article the other day from SLATE, WTF?

    12. Re:Zee Germans! by bongey · · Score: 1

      More from Hillary Shill BeauHD "That sack of shit next to Hillary is attracting flies! #debate"
      "Clinton wiped the floor with Trump tonight. Say hello to your next president, America!"
      " It's only a story because it has the 'Trump' buzzword. Stupid media is stupid."
      "I bet Trump hired the climber for publicity."

    13. Re:Zee Germans! by syntotic · · Score: 1

      You can bring in more Africans and Indians if you so wish, though it looks like Orientals are no longer so willing to come to the USA. I wonder why? Maybe something Made in China reason? Or scared of finding people angry because the abandoned the Nintendo DS platform at the height of its capabilities? Who knows.

    14. Re:Zee Germans! by Agripa · · Score: 1

      We have always been at war with Eastasia.

  3. I don't know who to blame. by freeze128 · · Score: 2

    Should I be angry at Adobe for having a crappy flash API, or should I be angry at Microsoft for providing Adobe Flash BY DEFAULT in Windows 10?

    1. Re:I don't know who to blame. by Anonymous Coward · · Score: 1

      Time for MS to follow firefoxs lead. Click to view flash.

    2. Re:I don't know who to blame. by ItsJustAPseudonym · · Score: 1

      Yes.

    3. Re:I don't know who to blame. by Rakarra · · Score: 1

      Time for MS to follow firefoxs lead. Click to view flash.

      But the problem is that no one is going to click to view a flash ad. Or click to view a flash tracking cookie.

    4. Re:I don't know who to blame. by Bing+Tsher+E · · Score: 1

      And that's a problem for whom??

    5. Re:I don't know who to blame. by Nehmo · · Score: 1

      You should be angry at Microsoft for providing WIndows 10 BY DEFAULT

      But I gotta run Windows. That's the OS my cracked programs run on.

      --
      (||) Nehmo (||)
    6. Re:I don't know who to blame. by Trailer+Trash · · Score: 1

      You should blame Donald Trump for hiring the Russians to do that using his secret server that connects directly to the Russian bank that something or other.

    7. Re:I don't know who to blame. by freeze128 · · Score: 2

      Where were you looking? Open Control Panel and you find a Flashplayer applet icon.

      This page says that Flash player is integrated in IE in Windows 10.

    8. Re:I don't know who to blame. by Rakarra · · Score: 1

      And that's a problem for whom??

      For most of the major moneyed stakeholders.

      Also, for the advertisers who keep these sites running.

  4. hey ms... by Anonymous Coward · · Score: 1

    ...how 'bout "FIX YOUR SHIT" instead doing press and/or blaming the russians for everything from hairloss to sunspots?!

  5. Russia linked? by dunkelfalke · · Score: 1

    Like librussia.so?

    --
    "It's such a fine line between stupid and clever" -- David St. Hubbins, Spinal Tap
    1. Re:Russia linked? by hey! · · Score: 1

      Like librussia.dll?

      There. Fixed that for you.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
    2. Re:Russia linked? by dunkelfalke · · Score: 1

      Windows DLLs don't usually have the lib prefix. Just saying.

      --
      "It's such a fine line between stupid and clever" -- David St. Hubbins, Spinal Tap
  6. Anonymous Intelligence by Dunbal · · Score: 1

    Russia's military intelligence agency, which U.S. intelligence officials have concluded were responsible for hacks of Democratic Party databases and emails.

    Which intelligence agencies would those be? Because the FBI has specifically denied this. Of course you could just be shilling for Hillary the liar.

    --
    Seven puppies were harmed during the making of this post.
    1. Re:Anonymous Intelligence by Archangel+Michael · · Score: 1

      I've heard it wasn't Russians at all, but US Intel agencies that leaked it, because they (the low level agents) hated the idea of Clinton Presidency, especially once they saw the writing on the wall about the Comey investigation not going after Clinton.

      Granted, that is speculation and unnamed sources. But that seems to be all that is needed these days.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
    2. Re:Anonymous Intelligence by K.+S.+Kyosuke · · Score: 1

      Granted, that is speculation and unnamed sources. But that seems to be all that is needed these days.

      You mean your comment? Yes, that would make sense. But the fact that Russians love Trump for some weird reason is well known.

      --
      Ezekiel 23:20
    3. Re: Anonymous Intelligence by K.+S.+Kyosuke · · Score: 1

      Yes, the Russians, who want to start a war, love him for that. But you can't be serious to claim that Sanders et al. were "itching to start a war". Besides, why did you guys elect Bush if this is suddenly a no-no for you?

      --
      Ezekiel 23:20
    4. Re:Anonymous Intelligence by Nehmo · · Score: 2

      I've heard it wasn't Russians at all, but US Intel agencies that leaked it, because they (the low level agents) hated the idea of Clinton Presidency, especially once they saw the writing on the wall about the Comey investigation not going after Clinton.

      Granted, that is speculation and unnamed sources. But that seems to be all that is needed these days.

      I don't know who it was that revealed those emails to the American public. It could have been DNC's Director of Voter Expansion Data, Seth Rich http://www.newsweek.com/seth-r... . Whoever-it-was did us a service. And whoever-it-was doesn't really matter. What matters is the content.

      --
      (||) Nehmo (||)
    5. Re: Anonymous Intelligence by Maritz · · Score: 1

      They love Trump because he's the only candidate who isn't itching to start a war.

      They love Trump because he would effectively be decapitation strike on the US and NATO. He would leave the west rudderless. He is a complete fucking mong who understands fuck all about anything.

      --
      I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
    6. Re: Anonymous Intelligence by Maritz · · Score: 1

      why did you guys elect Bush if this is suddenly a no-no for you?

      They knew Bush would never pick a fight with anyone capable of fighting back.

      It's easy to be a hawk when you're only looking at little chickens.

      --
      I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
  7. 2016 by Anonymous Coward · · Score: 2, Funny

    2016 cant be over if russians arent also blamed for global warming and erectile disfunction

    1. Re:2016 by Bing+Tsher+E · · Score: 1

      They're picking on Hillary.

      Make them stop it!

  8. Re:Flavor of the month!! by unixisc · · Score: 1

    Precisely! Why would they bother w/ Windows when they can just as easily engineer ReactOS to match Windows 7 to the dot, and then release it?

  9. "Fixed" is not the subject. Defects make money. by Futurepower(R) · · Score: 2

    Microsoft makes more money if defects are found in Windows. The defects make people and organizations feel it is necessary to buy a newer version.

    Microsoft management apparently thinks, "Why release good software when defects make money?"

    There should be government regulations preventing abuse of computer software customers. We shouldn't be forced to install all fixes offered, for example.

    We need an open-source operating system that can run all Windows software. (Using Linux requires re-training every user.)

  10. November 8th by PPH · · Score: 1

    Patch Tuesday. In more ways that one.

    --
    Have gnu, will travel.
  11. Link to Microsoft blog post about this by shthed · · Score: 1
  12. NOV 8 to late for the windows based voteing system by Joe_Dragon · · Score: 1

    NOV 8 to late for the windows based voteing systems.

  13. A vast right^H^H^H^H^H left wing conspiracy by knorthern+knight · · Score: 1

    Poor Hillary... everybody's out to get her.

    --

    I'm not repeating myself
    I'm an X window user; I'm an ex-Windows user
  14. Microsoft fix your OS by AHuxley · · Score: 1

    Hire some really great staff again and fix your OS.
    Its not that hard, a few US universities still turn out the best graduates every year. The very best in the world.
    They have the skills to make Microsoft products secure again.
    What are we seeing in this report?
    "A U.S. intelligence expert on Russian cyber activity " seems to have easy and constant press access.
    The "tell' is the lack of internal security on the part of the "U.S. intelligence expert" and been allowed to rush to tell the media.
    If this was real code, nobody would know and it would all be a secret and under a real investigation and mitigation.
    The US is using the media to link very old "Bear" code that has been talked about for a while and is well understood by contractors globally for years to sell other stories to the waiting media.
    The link back to "U.S. intelligence officials have concluded were responsible for hacks of Democratic Party databases and emails." should be understood in the context of what was said.
    "Julian Assange: 'A lot more material' coming on US elections"
    http://edition.cnn.com/2016/07...
    ""Perhaps one day the source or sources will step forward and that might be an interesting moment some people may have egg on their faces. But to exclude certain actors is to make it easier to find out who our sources are," Assange told CNN."
    The leak was a walk out like the Pentagon papers or US gov insider help given to the Watergate reporters.

    --
    Domestic spying is now "Benign Information Gathering"
  15. Troll by s.petry · · Score: 1

    Simple statement to recognize a troll: "Remember, unfettered Capitalism is Fascism." which simply means you do not know what Capitalism is. No point reading after that piece of ignorance.

    --

    -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

  16. Orthodox Christians by Latent+Heat · · Score: 1

    Actually before the recent resurgence of "political Islam", before Arab states opposed Israel (which defacto allied Arab Muslims and Christians, unlike what is happening now), well before the madness of WW-II, Jews experienced persecution at the hands of Orthodox Christians in Russia. It's the Fiddler-on-the-Roof thing; the Russian-refugee experience is the family history of many persons of Jewish heritage here in America.

    It is a point of divergence between Israel, which if not having friendlier relations with Russia, quickly sought and obtained accommodation of its security interests without interfering with what Russia is doing in Syria, and with the United States, where Russia is once again being demonized.

    To the extent that Jewish persons seek to influence policy in a way informed by life experience and family history, along with everyone else, Jews in America may have a somewhat different perspective on Russia and other Orthodox Christian countries than Israelis.

    There are also two sides to many ancient enmities. To the extent that Jews in America with "neo-Conservative" political label appear to be unreasonable in distrusting Russia and other Slavic countries with Orthodox Christians, there as that conclave of American Middle Eastern Christians and recent descendants, many of them Orthodox Christians, that Candidate Ted Cruz famously attended. Middle East Christians have fared poorly under Muslim Brotherhood, Al Qaeda, ISIS, and so on, and whereas Israel is certainly no friend of those groups, there is this tendency to lump all Arabs, Christian or Muslim, moderate or extremist, religious or secularist, into the same category as not being friends of Israel.

    Some shade was thrown on Israel at that meeting that caught the Senator by surprise, and he did an about face and started speaking in a way that was perceived as insulting to his hosts and signaling to other constituent groups of his "courage in standing up to anti-Semitism." That may have been aimed more at pro-Israel Evangelical Christians in the US than at pro-Israel Jews, it may say a lot more about the Senator than it does about Christians of whatever geographic origin or Jews, but it may offer some insight into the dynamic than to simplistically assert "it's okay to dump on the Russians."

    1. Re:Orthodox Christians by FilatovEV · · Score: 1

      [W]ell before the madness of WW-II, Jews experienced persecution at the hands of Orthodox Christians in Russia. It's the Fiddler-on-the-Roof thing; the Russian-refugee experience is the family history of many persons of Jewish heritage here in America.

      To the extent that Jewish persons seek to influence policy in a way informed by life experience and family history, along with everyone else, Jews in America may have a somewhat different perspective on Russia and other Orthodox Christian countries than Israelis.

      You do recognize that persecution of Jews in Russia happened before the October revolution of 1917, right? You do recognize that repressions against Jews were a major reason why many Jews sought to support and lead the October revolution, right? You do know those events had very dramatic effects.

      ...dude, I don't think you should let ancient life stories affect modern-day policies.

    2. Re:Orthodox Christians by unixisc · · Score: 1

      ...dude, I don't think you should let ancient life stories affect modern-day policies.

      Tell that to the Muslims - not just in the Mid East, but all over the world

    3. Re:Orthodox Christians by unixisc · · Score: 1

      Actually before the recent resurgence of "political Islam", before Arab states opposed Israel (which defacto allied Arab Muslims and Christians, unlike what is happening now), well before the madness of WW-II, Jews experienced persecution at the hands of Orthodox Christians in Russia. It's the Fiddler-on-the-Roof thing; the Russian-refugee experience is the family history of many persons of Jewish heritage here in America.

      Quite true. However, that persecution dates back to Tsarist Russia, but it's not true about Russia today. Also, while the Soviets blocked Jews from emigrating to Israel, Russia (since 1991) has had no issues w/ that.

      One quibble - 'Political Islam' is nothing but Islam itself: that religion is a geopolitical ideological cult masquerading as a religion. The Islamic calendar - the Hejira (sp?) starts w/ Mohammed becoming the ruler of Medina. The Qur'an is replete w/ hateful rhetoric against not just heathens (unjustified in its own right), but also against the 'people of the book' - Jews & Christians. The hadiths and tafseer elaborate on that in more detail

      It is a point of divergence between Israel, which if not having friendlier relations with Russia, quickly sought and obtained accommodation of its security interests without interfering with what Russia is doing in Syria, and with the United States, where Russia is once again being demonized.

      This is b'cos Israel recognizes that whatever faults the Russians may have, it's not in Israel's interests to pick any side in a civil war in Syria b/w 2 sets of Israel haters. Also, while Israel has its differences w/ the Assad regime - mainly the latter being a conduit b/w Iran and Hizbullah, they know that none of the rebel Syrian factions are anything like the late Anwar Sadat of Egypt or King Hussein of Jordan, who would recognize Israel's right to exist. So they made their deal w/ Russia whereby Israeli security in the Galilee or the Golan won't be jeopardized.

      To the extent that Jewish persons seek to influence policy in a way informed by life experience and family history, along with everyone else, Jews in America may have a somewhat different perspective on Russia and other Orthodox Christian countries than Israelis.

      There are also two sides to many ancient enmities. To the extent that Jews in America with "neo-Conservative" political label appear to be unreasonable in distrusting Russia and other Slavic countries with Orthodox Christians, there as that conclave of American Middle Eastern Christians and recent descendants, many of them Orthodox Christians, that Candidate Ted Cruz famously attended. Middle East Christians have fared poorly under Muslim Brotherhood, Al Qaeda, ISIS, and so on, and whereas Israel is certainly no friend of those groups, there is this tendency to lump all Arabs, Christian or Muslim, moderate or extremist, religious or secularist, into the same category as not being friends of Israel.

      One of the issues that Israel has is that Judeophobia is something that Arab Christians - particularly the Pali Christians as well as the Copts in Egypt - share w/ Muslims. While all the other Pali terror groups are Muslim Jihadi organizations - Hamas, Islamic Jihad, Al Aqsa Martyrs Brigades, et al, one of the Pali terror groups is the PFLP, which was led by the late George Habash, and which is a Marxist group, but populated by Pali Christians. Then there are Lebanese Christian factions allied w/ Hizbullah.

      However, my point above was that there is something called a sense of proportion, and prioritizing the threats. Regardless of whether Orthodox Christians have reformed their view of Judaism/Jews the way Catholics and Protestants have, fact remains that (aside from the Arabs), none of those countries - Russia, Ukraine, Poland,... want to wipe Israel off the map. But that is the goal of Islamic groups all over the world - be it Sunni groups like the Muslim Brother

    4. Re:Orthodox Christians by unixisc · · Score: 1

      One more thing I should add - when the West recognized Kosovo's secession from Serbia, Israel declined to join the crowd. They know that the Islamic tendencies of Muslims would sooner or later lead to them backing their Muslim comrades in the Mid East against Israel. Similarly, Israel declined to support the US when they bombed Serbia in 1998, knowing what it entails

    5. Re:Orthodox Christians by FilatovEV · · Score: 1

      ...dude, I don't think you should let ancient life stories affect modern-day policies.

      Tell that to the Muslims - not just in the Mid East, but all over the world

      Haha, that's why I'm talking to you and not to them.

  17. Who wrote the code? by Zemran · · Score: 1

    Reading the story it does sound like M$ are blaming Russia for their shitty work. M$ did not do a good job and as a result the product is bad. Nothing new there. A hacking group exploited the bad code. Nothing new there. For no valid reason they are linked to Russia. This is just propaganda. Of course Russia uses hackers whereas the US has whole divisions of in house hackers. The US is still the number one cyber terrorist and Russia has much less interest in the US than the US imagines. The US wants to go out and hurt everyone but the rest of the world is far more interested in enjoying their own lives. Russia is far more interested in Russia and has very little interest in the scary clown or the witch.

    --
    I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
  18. So? by Revek · · Score: 1

    Same shit different day.

  19. common denominator by micahraleigh · · Score: 1

    Is this why Microsoft and Hillary are so flawed ?

    I always knew Donald Trump approved of making Windows worse, and now he is using Putin to do it !!

  20. Israel and Slavic Countries by Latent+Heat · · Score: 1

    It was a friend, an intellectual with knowledge of my heritage, whose own family heritage is that of the Jewish experience in Ukraine from Tsarist times, who made me aware of the situation with Israel, Serbia, and the Kosovo War.

    There are so few "Great Russians" in the US, or at least until very recently, that the only connection Americans have had with Russia is through families whose ancestors were refugees from the persecutions of Jews in pre-Revolutionary Russia.

    What you say about Israel and Russia corroborates what my friend told me. But to many Americans, Jews and non-Jews alike, "Russians" are those bad people who chased Tevya from "Fiddler on the Roof" out of his home. I offered such as explanation why many in the U.S. view Russia aiding Syria's Assad very differently from Israel. I am not saying it is right or wrong, I am just trying to "wrap my head around" why there is a brewing confrontation between the U.S. and Russia over Syria whereas the Israelis appear to have made accommodation with Russia over Syria.

  21. Russia-linked... is it the NSA? by zedaroca · · Score: 1

    The last dump from the shadow brokers contained the servers the NSA uses to hack others, it included compromised Russian servers (Mustafa Al-Bassam tweet).

  22. Interesting question by allaunjsilverfox2 · · Score: 1

    If a major world power were to go to war with another, what is a multinationals responsibility? Especially if one of those nations demand access to their resources. In this instance, Microsoft was initially a American company. And they have been known to work with American agencies in the past. But they also market to Russia. Really, the question would apply to Wal-mart or any other company that has large databases.

    --
    Restore the madness of youth's lechery