{"id":4880,"date":"2018-02-04T01:29:00","date_gmt":"2018-02-04T00:29:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=4880"},"modified":"2024-10-05T19:01:28","modified_gmt":"2024-10-05T17:01:28","slug":"malware-using-meltdown-and-spectre-attacks-under-develoment-windows-defender-quarantines-poc-tools","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2018\/02\/04\/malware-using-meltdown-and-spectre-attacks-under-develoment-windows-defender-quarantines-poc-tools\/","title":{"rendered":"Malware using Meltdown and Spectre attacks under develoment – Windows Defender quarantines PoC tools"},"content":{"rendered":"

[German<\/a>]Currently, there are growing indications that we could experience side channel attacks on computer systems using Meltdown and Spectre vulnerabilities in the near future.<\/p>\n

<\/p>\n

More and more samples in circulation<\/h2>\n

\"\"Security researchers are seeing more and more suspicious file examples experimenting with the vulnerabilities of Meltdown and Spectre. Experts from AV-TEST, Fortinet and Minerva Labs have found that several people are experimenting with publicly available proof-of-concept (PoC) code for the vulnerabilities of Meltdown (CVE-2017-5754) and Spectre (CVE-2017-5715, CVE-2017-5753).<\/p>\n

\"Zunahme
\n(Increase in spectre\/meltdown samples, source:: AV-TEST)<\/p>\n

Researchers at AV-TEST have discovered 139 suspicious file samples<\/a> associated with the above mentioned CPU vulnerabilities. You can find this article in Fortinet's blog<\/a>. The danger that a functioning attack will soon take place is growing. Details can be found at Bleeping Computer.<\/a><\/p>\n

Antivirus vendors started to add patterns<\/h2>\n

The Bleeping Computer<\/a> article indicates, that not all malware samples has been uploaded to Virustotal. And many samples are related to security researchers. But Antivirus vendors seems to have begun, to add know code patters to their signature files. Windows Defender quarantines tools, that are using strings like \"Squeamish Ossifrage\" or \"malicious_x = %p\". German site heise.de reported that within the article Microsoft stuft das PoC-Programm zu Spectre als b\u00f6sartig ein<\/a> [Google Translate version<\/a>].<\/p>\n

Similar articles
\n<\/strong>Design flaw in Intel CPUs set operating systems at risk<\/a>
\nMeltdown and Spectre: What Windows users need to know<\/a>
\nHow to mitigate Spectre in Google Chrome<\/a>
\nTool tip: Ashampo Spectre Meltdown CPU-Checker<\/a>
\nTest: Is my browser vulnerable for Spectre attacks?<\/a>
\nInSpectre: Test your machine against Meltdown\/Spectre flaw<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Currently, there are growing indications that we could experience side channel attacks on computer systems using Meltdown and Spectre vulnerabilities in the near future.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580],"tags":[69],"class_list":["post-4880","post","type-post","status-publish","format-standard","hentry","category-security","tag-security"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/4880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=4880"}],"version-history":[{"count":1,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/4880\/revisions"}],"predecessor-version":[{"id":35715,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/4880\/revisions\/35715"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=4880"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=4880"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=4880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}