Microsoft Windows is no longer secure: A new bug can enable hackers to install Rootkit in your device

Sep 25, 2021 | Shaoni Ghosh

Microsoft Windows is no longer secure: A new bug can enable hackers to install Rootkit in your device title banner

The Findings

 

Researchers discovered an unfixed vulnerability in Microsoft's Windows Platform Binary Table (WPBT), which impacts all Windows-based devices since Windows 8, and may be used to install a rootkit and compromise device integrity.

 

Every OS is vulnerable to attacks that install fake vendor-specific tables due to loopholes in Windows. Because of the widespread use of ACPI and WPBT, these motherboard-level vulnerabilities may render projects like Secured-core obsolete.Experts claim that attackers with physical access or remote access can misuse these tables.

 

WPBT is a feature that was first introduced in Windows 8 in 2012 and allows boot firmware to supply Windows with a platform binary that the OS may process.

 

PC makers can use UEFI to point to certified portable executables or other vendor-specific drivers that are included in the UEFI firmware ROM image and can be loaded into physical memory during Windows boot-up. To put it another way, it enables users to pre-load any OS code before running it on a device.

 

WPBT is built to keep important functions like anti-theft software running even if the operating system is changed, formatted, or reinstalled.

 

(Recommended Blog: Security Analytics)

 

Misuse of the technology, according to Microsoft, might pose a security risk. It also allows the installation of rootkits on computers.

 

(Must Check: 7 Best Data Security Practices)

 

WPBT-based solutions must be as safe as feasible, with no vulnerable circumstances for Windows users. Microsoft warns that the Malware (malicious software or undesirable software) must not be deployed without the agreement of the user in WPBT solutions.

 

(Related Reading: Malware- one of the types of Cyber Threats)

 

According to TheHackerNews, the WPBT method can accept a signed binary with a revoked or expired certificate to entirely circumvent the integrity check, allowing an attacker to sign a malicious binary with an already accessible expired certificate and run arbitrary code with kernel privileges when the device starts up.

 

Microsoft has advised applying a Windows Defender Application Limit (WDAC) policy to strictly control what binaries can be allowed to execute on devices in response to the results.Researchers have discovered a second set of flaws in the boot process of devices that may be exploited to achieve remote execution. 

 

The current revelation comes after a different series of findings in June 2021 involving a group of four vulnerabilities known as BIOS Disconnects.

Tags #Technology
Advertisement

evelynryan2022

Oct 14, 2022

GET RICH WITH BLANK ATM CARD, Whatsapp: +18033921735 I want to testify about Dark Web blank atm cards which can withdraw money from any atm machines around the world. I was very poor before and have no job. I saw so many testimony about how Dark Web Cyber hackers send them the atm blank card and use it to collect money in any atm machine and become rich. {DARKWEBONLINEHACKERS@GMAIL.COM} I email them also and they sent me the blank atm card. I have use it to get 500,000 dollars. withdraw the maximum of 5,000 USD daily. Dark Web is giving out the card just to help the poor. Hack and take money directly from any atm machine vault with the use of atm programmed card which runs in automatic mode. You can also contact them for the service below * Western Union/MoneyGram Transfer * Bank Transfer * PayPal / Skrill Transfer * Crypto Mining * CashApp Transfer * Bitcoin Loans * Recover Stolen/Missing Crypto/Funds/Assets Email: darkwebonlinehackers@gmail.com Text & Call or WhatsApp: +18033921735 WEBSITE: https://darkwebonlinehackers.com

evelynryan2022

Oct 14, 2022

GET RICH WITH BLANK ATM CARD, Whatsapp: +18033921735 I want to testify about Dark Web blank atm cards which can withdraw money from any atm machines around the world. I was very poor before and have no job. I saw so many testimony about how Dark Web Cyber hackers send them the atm blank card and use it to collect money in any atm machine and become rich. {DARKWEBONLINEHACKERS@GMAIL.COM} I email them also and they sent me the blank atm card. I have use it to get 500,000 dollars. withdraw the maximum of 5,000 USD daily. Dark Web is giving out the card just to help the poor. Hack and take money directly from any atm machine vault with the use of atm programmed card which runs in automatic mode. You can also contact them for the service below * Western Union/MoneyGram Transfer * Bank Transfer * PayPal / Skrill Transfer * Crypto Mining * CashApp Transfer * Bitcoin Loans * Recover Stolen/Missing Crypto/Funds/Assets Email: darkwebonlinehackers@gmail.com Text & Call or WhatsApp: +18033921735 WEBSITE: https://darkwebonlinehackers.com

evelynryan2022

Oct 14, 2022

GET RICH WITH BLANK ATM CARD, Whatsapp: +18033921735 I want to testify about Dark Web blank atm cards which can withdraw money from any atm machines around the world. I was very poor before and have no job. I saw so many testimony about how Dark Web Cyber hackers send them the atm blank card and use it to collect money in any atm machine and become rich. {DARKWEBONLINEHACKERS@GMAIL.COM} I email them also and they sent me the blank atm card. I have use it to get 500,000 dollars. withdraw the maximum of 5,000 USD daily. Dark Web is giving out the card just to help the poor. Hack and take money directly from any atm machine vault with the use of atm programmed card which runs in automatic mode. You can also contact them for the service below * Western Union/MoneyGram Transfer * Bank Transfer * PayPal / Skrill Transfer * Crypto Mining * CashApp Transfer * Bitcoin Loans * Recover Stolen/Missing Crypto/Funds/Assets Email: darkwebonlinehackers@gmail.com Text & Call or WhatsApp: +18033921735 WEBSITE: https://darkwebonlinehackers.com

michaelcalcewizard78

Oct 17, 2022

Welcome. BE NOT TROUBLED anymore. you’re at the right place. Nothing like having trustworthy hackers. have you lost money before or bitcoins and are looking for a hacker to get your money back? You should contact us right away it’s very affordable and we give guaranty to our clients. Our hacking services are as follows: -hack into any kind of phone _Increase Credit Scores _western union, bitcoin and money gram hacking _criminal records deletion _Hacking of phones(that of your spouse, boss, friends, and see whatever is being discussed behind your back) _Security system hacking...and so much more. Contact us now and get whatever you want at: michaelcalcewizard78@gmail.com Whatsapp: +447375542502 MICHAEL CALCE WIZARD

isasadiqa

Oct 31, 2022

▲Hello I greatly recommend you Via our ongoing Invitation to join our Great Illuminati and become Rich and Famous. Are you seeking for Wisdom and Knowledge? Are you a Business man/woman, Pastor,pianist,engineer,scientist, lawyer,Politician,Model,Music Teacher,Photographer,Musician,Doctor,fashion artist,Footballer,pilot,Swimmer, e.t.c? Do you want to be a Famous Artist or an Actor, and you want to be Rich, Powerful and Famous in the world? Join the Illuminati New World Order and let your Dreams come through, Become a new member today receive the sum of £800,000 Pounds every month with a car. We The Illuminati is an elite organization of world leaders, business authorities, innovators, artists, and other influential members of this planet. Our coalition unites influencers of all political, religious, and geographical backgrounds to further the prosperity of the human species as a whole, as the Elites 👁🔺. THIS IS YOUR ONE LIFE TIME OPPORTUNITY. WE'RE ALWAYS WATCHING OUT FOR YOU.Whatsapp +44 7852 902271 Email grandmasterilluminati29@gmail.com

isasadiqa

Oct 31, 2022

▲Hello I greatly recommend you Via our ongoing Invitation to join our Great Illuminati and become Rich and Famous. Are you seeking for Wisdom and Knowledge? Are you a Business man/woman, Pastor,pianist,engineer,scientist, lawyer,Politician,Model,Music Teacher,Photographer,Musician,Doctor,fashion artist,Footballer,pilot,Swimmer, e.t.c? Do you want to be a Famous Artist or an Actor, and you want to be Rich, Powerful and Famous in the world? Join the Illuminati New World Order and let your Dreams come through, Become a new member today receive the sum of £800,000 Pounds every month with a car. We The Illuminati is an elite organization of world leaders, business authorities, innovators, artists, and other influential members of this planet. Our coalition unites influencers of all political, religious, and geographical backgrounds to further the prosperity of the human species as a whole, as the Elites 👁🔺. THIS IS YOUR ONE LIFE TIME OPPORTUNITY. WE'RE ALWAYS WATCHING OUT FOR YOU.Whatsapp +44 7852 902271 Email grandmasterilluminati29@gmail.com

isasadiqa

Oct 31, 2022

▲Hello I greatly recommend you Via our ongoing Invitation to join our Great Illuminati and become Rich and Famous. Are you seeking for Wisdom and Knowledge? Are you a Business man/woman, Pastor,pianist,engineer,scientist, lawyer,Politician,Model,Music Teacher,Photographer,Musician,Doctor,fashion artist,Footballer,pilot,Swimmer, e.t.c? Do you want to be a Famous Artist or an Actor, and you want to be Rich, Powerful and Famous in the world? Join the Illuminati New World Order and let your Dreams come through, Become a new member today receive the sum of £800,000 Pounds every month with a car. We The Illuminati is an elite organization of world leaders, business authorities, innovators, artists, and other influential members of this planet. Our coalition unites influencers of all political, religious, and geographical backgrounds to further the prosperity of the human species as a whole, as the Elites 👁🔺. THIS IS YOUR ONE LIFE TIME OPPORTUNITY. WE'RE ALWAYS WATCHING OUT FOR YOU.Whatsapp +44 7852 902271 Email grandmasterilluminati29@gmail.com

isasadiqa

Oct 31, 2022

▲Hello I greatly recommend you Via our ongoing Invitation to join our Great Illuminati and become Rich and Famous. Are you seeking for Wisdom and Knowledge? Are you a Business man/woman, Pastor,pianist,engineer,scientist, lawyer,Politician,Model,Music Teacher,Photographer,Musician,Doctor,fashion artist,Footballer,pilot,Swimmer, e.t.c? Do you want to be a Famous Artist or an Actor, and you want to be Rich, Powerful and Famous in the world? Join the Illuminati New World Order and let your Dreams come through, Become a new member today receive the sum of £800,000 Pounds every month with a car. We The Illuminati is an elite organization of world leaders, business authorities, innovators, artists, and other influential members of this planet. Our coalition unites influencers of all political, religious, and geographical backgrounds to further the prosperity of the human species as a whole, as the Elites 👁🔺. THIS IS YOUR ONE LIFE TIME OPPORTUNITY. WE'RE ALWAYS WATCHING OUT FOR YOU.Whatsapp +44 7852 902271 Email grandmasterilluminati29@gmail.com

isasadiqa

Oct 31, 2022

▲Hello I greatly recommend you Via our ongoing Invitation to join our Great Illuminati and become Rich and Famous. Are you seeking for Wisdom and Knowledge? Are you a Business man/woman, Pastor,pianist,engineer,scientist, lawyer,Politician,Model,Music Teacher,Photographer,Musician,Doctor,fashion artist,Footballer,pilot,Swimmer, e.t.c? Do you want to be a Famous Artist or an Actor, and you want to be Rich, Powerful and Famous in the world? Join the Illuminati New World Order and let your Dreams come through, Become a new member today receive the sum of £800,000 Pounds every month with a car. We The Illuminati is an elite organization of world leaders, business authorities, innovators, artists, and other influential members of this planet. Our coalition unites influencers of all political, religious, and geographical backgrounds to further the prosperity of the human species as a whole, as the Elites 👁🔺. THIS IS YOUR ONE LIFE TIME OPPORTUNITY. WE'RE ALWAYS WATCHING OUT FOR YOU.Whatsapp +44 7852 902271 Email grandmasterilluminati29@gmail.com

shallikquawalker

Nov 25, 2022

I was scammed by a binary option website iq options to be exact. I lost about $253,000 to them. It was a really hard time for me because that was all i had and they tricked me into investing the money with a guarantee that i will make profit from the investment.. I was referred to "WIZARD GARRY SPEED RECOVERY",they are recovery specialists for all types of online scams,they helped me in recovering all my lost funds I couldn’t believe at first that this was possible as i have lost all hope in contacting anyone on the internet, but i guess not everyone is bad after all. You can reach them on E-mail: wzardgarryspeedhack@gmail.com WhatsApp: +1 928 534 9618 website:https://wzardgarryspeedhac.wixsite.com/my-site-1