 |
 |
 |
Vistas UAC warnings can hide a rat, Symantec says
Saturday, March 3rd, 2007
Windows Vista’s User Account Control (UAC), a system that Microsoft Corp. says makes the new 
operating system safer from attack, can be spoofed and shouldn’t be completely trusted, a Symantec Corp. researcher said today. Ollie Whitehouse, an architect at Symantec’s advanced threats research team, first used a blog entry yesterday to point out how a hacker could use a file included with Vista to disguise the UAC warning dialog in the color associated with alerts generated by Windows itself. The process to spoof a UAC dialog is roundabout, but doable, said Whitehouse. It would start with a user falling for any one of the current hacker tricks.
"The most likely scenario is that a user gets compromised by malicious code, from a Trojan [horse] or a vulnerability in a third-party application like Office or a browser," he said in an interview. Vista’s UAC warnings can hide a rat, Symantec says
Popular Posts
Please read our Disclaimer
