Windows 10 returns to the center of the world’s attention whole and not in a positive way, and that’s because a new extremely serious problem has been discovered for the PC operating system, and it affects everyone, without discrimination. It seems that for a year now a group of Chinese hackers has been using a new type of rootkit to attack the IT infrastructures of South Asian companies, and so far Microsoft has not been able to block it.
Windows 10 is vulnerable to this new type of attack even if it comes to the latest versions of the operating system, and that’s because there is still no patch to provide protection for users. The rootkit used by the Chinese is meant to hide any existence of hacker exploitation of the systems, so that anyone who would analyze Windows 10 with ordinary security systems would not discover any problem.
Windows 10 has Microsoft security measures in place to protect users, but they are not enough to provide protection for everyone when an attack is initiated. Windows 10 is used by millions of people around the world, so anyone can become a target of hackers, especially since they do not discriminate between those who may be affected by problems and those who cannot, so the situation is serious.
“To bypass the Windows driver signature control mechanism, GhostEm Emperor uses a loading scheme that involves a component of an open-source project called“ Cheat Engine ”. This advanced set of tools is unique, and Kaspersky researchers see no resemblance to the already known threat actors. Kaspersky experts have assumed that the toolkit has been in use since at least July 2020. ‘
Windows 10 has this new type of attack directed for the time being only to companies with large IT networks through which important information is transferred, so that regular users can only become collateral victims if they work for these companies. It is not yet known to what extent this new type of attack can be extended to ordinary people, but anything is possible since it is now known about its existence and exploitation by hackers.
Windows 10 does not currently have any security measures in place to allow the detection of this new type of rootkit, but Microsoft will probably find a solution in the future to block the exploited vulnerabilities.
Note: This article have been indexed to our site. We do not claim ownership or copyright of any of the content above. To see the article at original source Click Here