I just read that the hack of the SolarWind software that targeted government facilities also infiltrated MS. I realize it’s a bit premature to be concerned, but the media seems to be light on information concerning this. Has anyone heard more on this?
Thanks, I saw the second article this morning. I think I will play cowered and delay any updates for awhile. The last WU update I did was prior to the hack and is backed up. I just paused WU to 02/14/2021 to give things a chance to settle out. I know MS says to not disable WU, but.....
Jamis, I'm fairly certain that the Russians aren't interested to hack into your computer, just remember an updated computer is a strong protection layer.
Yeah, I know there is nothing on my system that these folks would be interested in, but I'd worry more that it could be used as an attack tool (botnet) for other purposes. Since I've not seen any identification of what the nefarious code is, nor if any of the AV packages have updated to identify the malware, I'm going to be rather cautious for awhile. I just downloaded the latest version of MSERT and will run it after NIS does its weekly full system scan tonight.
Hi,
Pretty tough when solar.. turns into an method attach green new deal bait bonanza.
The four AV packages I have found nothing out of the ordinary on my system, which is a good thing I guess. Since this issue seems to be unfolding as the days go by and MS already stated there would be no CUs in December due to the holidays, I’m going wait until January has run its course. I did read somewhere that MS has a hundred people working on this hack. I am going to increase the AV activity on my system for the short term until more information comes to light.
I don't think any consumer AV software on the market today would detect this stuff. Heck, if it snuck into all of those highly protected classified systems, I'll bet it could sneak into your system without even breaking a sweat.
You should be more worried about the hack occurring at you service provider or your bank rather than yourself. SolarWinds provides network monitoring and security tools. Obviously one or more of those tools was compromised and allowed any service using the same to become vulnerable to attack. MS appears to have plugged the whole but time will tell.
I think the fact that MS has 100 people working on this is telling how much reliance they had on SolarWinds products, how much did others including our government have is the million dollar question at this point!
Quote