Windows 10 antivirus weakness lets attackers evade detection

Asia's Tech News Daily

A deacde-old vulnerability in Microsoft Defender that could allow any virus or malware strain to operate undetected on the Windows operating system has been uncovered.

The flaw is quite simple in theory, and focuses on planting malware where Microsoft Defender is not permitted to peek. Some programs trigger a false positive alert, and as such, need to be excluded from the scan. One way Defender users do this is by adding certain locations, either locally, or on a network, that get excluded from the scan.

However, malicious actors can learn about these locations, with relative ease. According to Antonio Cocomazzi, a cybersecurity researcher from SentinelOne, who was allegedly the first to uncover and report on the flaw, by simply running a “reg query” command, one can reveal all the locations that are beyond Microsoft Defender’s reach, and place their malware there.

Local access required

Cybersecurity researcher Nathan McNulty, from OpsecEdu, chimed in to add that things are even worse than that, as Defender makes automatic exclusions when users install specific roles or features.

The flipside to this coin is that for the flaw to be abused, the malicious actor needs to have local access, in advance. According to BleepingComputer, that doesn’t matter too much, as many malicious actors who’ve already compromised certain endpoints and networks, can use the flaw to allow stealthy lateral movement.

The publication also put the idea to the test, saying it managed to successfully install the Conti ransomware, without triggering an alert from the antivirus solution.

The vulnerability is roughly eight years old, researchers agree, saying that administrators should take extra care to properly configure Microsoft Defender exclusions on servers and local machines via group policies.

The vulnerability was found to affect Windows 10 21H1 and Windows 10 21H2 users, but Windows 11 is safe.

  • You might also want to check out our list of the best endpoint protection services right now

Via: BleepingComputer

Internet Explorer Channel Network
Asia's Tech News Daily
News Related

OTHER NEWS

Trump claims he couldn't have lost the 2020 presidential election because his Arizona rally boasted thousands of attendees and 'had cars that stretch out for 25 miles'

Former President Donald Trump reacts to the crowd prior to speaking at a “Save America” rally in Florence, Ariz., on January 15, 2022.AP Photo/Ross D. Franklin Former President Trump on ... Read more »

'Keep doors and windows locked', locals told after deadly attack on elderly couple

Freda Walker, 86, is killed and her husband, Kenneth, 88, left with ‘horrific injuries‘ in shocking incident at their Derbyshire home Residents in a Derbyshire town have been told to ... Read more »

This laptop from 1989 can mine Bitcoin, but it definitely won't make you rich

A developer has managed to turn a laptop from 1989 into a cryptocurrency mining machine, but it won’t be making anyone rich any time soon. The computer in question is ... Read more »

Wayfair's huge home and kitchen sale lets you save up to 60% on Cuisinart, KitchenAid and more

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. Spruce up your home for less this year with best-selling pieces ... Read more »

I don't care if gaming chairs suck, I'm not buying a Herman Miller

If you ask for any recommendations online when looking for a new gaming chair, chances are you’ll be told at least once that all ‘racing’ style chairs (named such as ... Read more »

49ers vs Cowboys live stream: how to watch NFL playoff game online

It’s being tipped as the game of the Wild Card Weekend, with Dallas D looking like the perfect opponents for the Niners’ run-heavy offense, but more importantly, if you watch ... Read more »

A 74-year-old woman was exonerated of the rape and murder of her niece after spending 27 years in prison

A cell in the new HMP Bronzefield (women’s prison) in Ashford Middlesex, England.Tim Ockenden – PA Images/PA Images via Getty Images Joyce Watkins was exonerated after a wrongful conviction led ... Read more »

Giant crocodile found under floorboards of primary school classroom goes on display

The remains of a saltwater crocodile found underneath a classroom at a Welsh Primary School have gone on display after being restored. (Rhondda Cynon Taf Council) A 120-year-old crocodile found ... Read more »

Take 25% off best-sellers during this 48-hour Everlane sale—shop jeans, leggings, outerwear and more

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. A minimalist wardrobe makes getting dressed in the morning really simple. ... Read more »

The 48 best MLK Day sales to shop right now—Michael Kors, Fenty Beauty, Macy's, QVC and more

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. Martin Luther King Jr. Day honors the groundbreaking work of minister ... Read more »

Correction: Virgin Orbit-Launch story

LOS ANGELES — In a story published January 13, 2022, about a Virgin Orbit launch, The Associated Press erroneously reported that Richard Branson said 480 countries can use Virgin Orbit. ... Read more »

A guide to finding your favorite streaming program: Talking Tech podcast

Hit play on the player above to hear the podcast and follow along with the transcript below. This transcript was automatically generated, and then edited for clarity in its current ... Read more »

Super Bowl TV deal at Best Buy: Sony's 85-inch 4K TV gets $400 slashed off price

The Super Bowl is officially less than a month away, and Best Buy is kicking things off with epic TV deals that you can shop right now. Our favorite bargain ... Read more »

Shop best-selling lululemon leggings, hoodies, joggers and more during the We Made Too Much sale

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. lululemon’s cult-favorite leggings are luxurious and certainly splurge-worthy for good reason. ... Read more »

Carol Vorderman looks incredible in curve-hugging activewear on Portuguese health retreat

Carol Vorderman set pulses racing on Sunday as she posed in activewear ahead of a long day of hiking on her luxe Portuguese health retreat. SEE: Carol Vorderman's grand home ... Read more »

Dozens of people flee in panic after hearing a "gunshot" in a UK McDonald's

Shocking footage shows dozens of people fleeing in panic after hearing a “gunshot” in a packed McDonald’s in Manchester. Video shows a huge 30-people brawl break out at the restaurant ... Read more »

‘Such a mess': Andy Murray and tennis world react to Djokovic's deportation

Photograph: Loren Elliott/Reuters Most players have avoided addressing case on social media Murray: ‘I respect Novak, I don’t like that he is in this situation’ The tennis world reacted with ... Read more »

6 ways open-source devs can make money

The amount of money you can make from open source code depends on several factors. First of all, the popularity of your open source project plays a significant role that ... Read more »

Eagles vs Buccaneers live stream: how to watch NFL playoff game online

Tom Brady to go one and done? Surely not, but then again he is missing two of his favorite targets, in Chris Godwin and Antonio Brown. Even so, the Eagles ... Read more »

Samsung Galaxy Z Fold 4 needs to up its game to compete with other foldable phones

The Samsung Galaxy Z Fold 3 currently holds the ‘best foldable phone’ title in its grip – but it’s a weak grip, that looks set to break very soon if ... Read more »

The iPad Pro 2022 could support MagSafe through a glass Apple logo

It looks likely that there will be an iPad Pro 2022 making an appearance at some point this year, and new details have emerged about one of the new features ... Read more »

Peloton Bike review

Two-minute review If you’re interested in fitness, it’s likely you’ve heard of Peloton. It’s a relatively recent addition to the home fitness market that aims to give you a boutique ... Read more »

Nvidia RTX 3090 Ti leaked pricing suggests a wallet-damaging GPU

Nvidia RTX 3090 Ti pricing has leaked from some European retailers, and it seems the new flagship graphics card will take perhaps a chunkier bite out of your wallet than ... Read more »

Novak Djokovic deported: tennis star leaves Australia after losing visa case - latest updates

Djokovic says he is 'extremely disappointed' at decision World No 1 to leave Australia on flight at 11.30am GMT on Sunday ​Novak Djokovic has been deported from Australia after federal ... Read more »

How to get started with open water swimming

Swimming is a great activity if you’re looking to get in shape and stay that way. Hitting the local pool on a regular basis is perfect for burning calories, keeping ... Read more »

'Non-fungi-what?' How I explained NFTs to my boomer parents

NFTs, or “non-fungible tokens,” are having their breakthrough moment. In just the past few months, they’ve evolved from mostly curiosity’s to more commonplace collectibles. On Thursday alone, people spent nearly ... Read more »

Here's another reason you should be careful about what you post online

There are plenty of reasons to exercise caution when posting content online, but more attention needs to be paid to the potential impact on employability, a new report suggests. According ... Read more »

British girl, 5, dies in horror ski slope accident in French Alps

The girl died in the ski resort of Flaine (pictured) (Pixabay ) A 5-year-old British girl has been killed in a tragic accident on a ski slope in the French ... Read more »

Amanda Holden enlists vacuum cleaner and thigh-high black boots for 'epic' garage singing session

Amanda Holden channelled her inner pop star to wind down at home this weekend. (Getty Images) Possibly as part of a commendable effort to lift people's January spirits, Amanda Holden ... Read more »

Covid tests for fully vaccinated travellers ‘to be scrapped this month'

Travel bosses will welcome the new changes (AFP via Getty Images) Vaccinated travellers will be able to go on holiday without taking <a href="/tag/covid-tests“>Covid tests on their return to the ... Read more »

Tony Blair Refuses To Call For Boris Johnson To Resign Over Partygate

Boris Johnson and Tony Blair at the Cenotaph in Whitehall, on November 14, 2021. (Photo: TOBY MELVILLE via Getty Images) Sir Tony Blair has refused to call for Boris Johnson ... Read more »

‘Stop lying to us': John Bishop calls Boris Johnson a ‘p***k' over No 10 parties

John Bishop has called Boris Johnson a “p***k” for breaking Covid-19 rules to attend a party at the height of lockdown. The prime minister is facing pressure to resign after ... Read more »

Liverpool vs Brentford live stream: how to watch EPL online from anywhere

Having taken just two points from their last three games, Jurgen Klopp knows only a win today at Anfield against Brentford will do if Liverpool are to keep in touch ... Read more »

Ominous supercell storm captured over Texas in mesmerizing time-lapse

Mesmerising time-lapse footage has been captured of an ominous supercell storm cloud. Meteorology student Isaac Schluesche captured the images while storm chasing near the town of Earth, Texas. Isaac, of ... Read more »

Prince Andrew accused of ‘victim blaming' over sexual abuse case legal tactics

Prince Andrew has been accused of “victim blaming” by women’s rights groups and legal experts after demanding to see Virginia Roberts Giuffre’s mental health records and suggesting she has “false ... Read more »

What AI could be like when you plug a computer into your brain

“Our consciousness is everything. You become what you think about.” — Buddha In the few minutes that you are reading this article, I will tell you about a completely new ... Read more »

'They killed a beautiful sportsman and his career': How the world reacted to Novak Djokovic's deportation

‘They killed a beautiful sportsman and his career’: How the world reacted to Novak Djokovic‘s deportation – EPA Novak Djokovic has lost his appeal against deportation in Australia after a ... Read more »

Huge Samsung Galaxy Tab S8 leak reveals everything about the upcoming tablets

All the signs point to the Samsung Galaxy Tab S8 series of tablets arriving early this year, and now we’ve got a major specs leak to pore over, one which ... Read more »

Kanye West attends daughter Chicago's birthday after claiming Kim Kardashian ‘wouldn't share' address

Kanye West attended his daughter Chicago’s fourth birthday party after claiming Kim Kardashian “wouldn’t share” the address. Chicago is the second youngest of four of the children West shares with ... Read more »

Muslim women in India horrified to find themselves up for ‘auction' on racist app

The intent “was to sexually harass, disgrace, humiliate and hate on women for speaking out against the government,” said one of the women who was featured. Read more »
On free-english-test.com you will find lots of free English exam practice materials to help you improve your English skills: grammar, listening, reading, writing, ielts, toeic