Windows 7 still easy to exploit

Windows 7 still easy to exploit

Hackers can still pull the wool over users' eyes in Windows 7, according to security experts.

Microsoft may be hyping Windows 7 as the bees knees of OSes, but security boffins reckon the Redmond Giant still hasn't bothered to fix some rather obvious security holes.

According to Patrik Runald, a top research advisor at Finnish based F-Secure, the fact that Microsoft still allows Windows Explorer's file manager to hide the full extension of a file name makes it easy for hackers to exploit more naïve users.

For instance, a hacker who names his trojan 'attack.txt.exe' has a good chance of scamming less savvy users who will see the file as a text icon named 'attack.txt' in Windows Explorer. This will make them more likely to click on it, not realizing it is actually an executable file.

Runald said this "has been used for years by virus writers."

"People typically look at the icon to know what the file is," Runald told ComputerWorldUK. "If it looks like a Word doc or a PDF file, there's an implicit trust in it, and users are more likely to click on those files, even if they are actually an executable."

Source: theinquirer.net (c) 2010 Incisive Media

See more about:  windows  |  security  |  hax
 
 
Latest articles on BIT Latest Articles from BIT
Epson's 100ppm inkjet coming soon
24 Mar 2017
The Epson WorkForce Enterprise is the "most powerful office printing system ever built", capable ...
ReadyNAS RN214 review: Netgear's easy-to-use four-bay NAS
16 Mar 2017
Looking for a business-class four-bay network-attached storage device that’s easy to use? ...
How the CIA hacking tools allegedly work: inside the WikiLeaks files
8 Mar 2017
WikiLeaks reveals how the CIA has allegedly hacked into Samsung TVs, iPhones, Android phones, ...
Spammers 'leak database of 1.4 billion users'
8 Mar 2017
Spammer's data hoard – which includes real names, email addresses and in some cases home ...
Beware of fake 'ASIC' email carrying ransomware
6 Mar 2017
Security provider MailGuard says it has detected "one of the largest-scale fraud inundations" in ...

Latest Comments

Latest Competitions

WIN! One of ten double passes to see Ghost in the Shell! 

WIN! One of ten double passes to see Ghost in the Shell!

Scarlett Johansen stars as a special forces cyborg in the first live-action adaptation of the seminal manga series.
 

From our Partners

PC & Tech Authority Downloads