Novel attack on Windows spotted in phishing campaign run from and targeting China

Chinese web champ Tencent's cloud is being used by unknown attackers as part of a phishing campaign that aims to achieve persistent network access at Chinese entities. US-based threat detection, investigation and response tools vendor Securonix last week claimed to have "uncovered a covert campaign targeting Chinese-speaking …

[Neil Barnes]

The latter two nations are among Beijng's closest friends.

Keep a close watch on your enemies.

Keep a closer watch on your friends.

[Anonymous Coward]

DLL path traversal vulnerability ..

DLL Hijacking Vulnerability Attacks

A bit of a design fault. Seeing as the search %PATH% can be altered by the current process.

%EXE_DIR%;C:\Windows\System32;C:\Windows\System;C:\Windows;%CWD%;%PATH%

[sitta_europea]

Re: DLL path traversal vulnerability ..

"... A bit of a design fault. ..."

You mean a *huge* security hole?