微软称俄罗斯黑客利用其Windows缺陷进行攻击,俄罗斯会有什么表示呢?
Microsoft Corp said on Tuesday that a hacking group previously linked to the Russian government and U.S. political hacks was behind recent cyber attacks that exploited a newly discovered Windows security flaw.
The software maker said in an advisory on its website there had been a small number of attacks using “spear phishing” emails from a hacking group known Strontium, which is more widely known as “Fancy Bear,” or APT 28. Microsoft did not identify any victims.
Microsoft’s disclosure of the new attacks and the link to Russia came after Washington accused Moscow of launching an unprecedented hacking campaign aimed at disrupting and discrediting the upcoming U.S. election.
The U.S. government last month formally blamed the Russian government for the election-season hacks of Democratic Party emails and their subsequent disclosure via WikiLeaks and other entities. Russia has denied those accusations.
Microsoft said a patch to protect Windows users against the newly discovered threat will be released on Nov. 8, which is Election Day. It was not clear whether the Windows vulnerability had been used in any of the recent U.S. political hacks.
Representatives of the FBI and the Department of Homeland Security could not immediately be reached for comment.
A U.S. intelligence expert on Russian cyber activity said that Fancy Bear primarily works for or on behalf of the GRU, Russia’s military intelligence agency, which U.S. intelligence officials have concluded were responsible for hacks of Democratic Party databases and emails.
In spear phishing, an attacker sends targeted messages, typically via email, that exploit known information to trick victims into clicking on malicious links or open tainted attachments.
Microsoft said the attacks exploited a vulnerability in Adobe Systems Inc’s Flash software and one in the Windows operating system.
Adobe released a patch for that vulnerability on Monday, when security researchers with Google went public with details on the attack.
Microsoft chided rival Google for going public with details of the vulnerabilities before it had time to prepare and test a patch to fix them.
“Google’s decision to disclose these vulnerabilities before patches are broadly available and tested is disappointing, and puts customers at increased risk,” Microsoft said.
A Google representative declined to comment on Microsoft’s statement.
Google disclosed the flaw on Monday, following its standing policy of going public seven days after discovering “critical vulnerabilities” that are being actively exploited by hackers.
Google gives software companies 60 days to patch less serious bugs.
更多精彩内容,请查阅查字典英语网:http://yingyu.chazidian.com/
历年四级阅读理解逐句翻译:(1)
阅读理解详解15篇(Passage 1)
阅读理解详解15篇(Passage 3)
大学英语四级模拟试卷第01组(阅读3)
历年四级阅读理解逐句翻译:(10)
阅读理解详解15篇(Passage 15)
阅读理解详解15篇(Passage 13)
CET阅读理解的那层窗户纸
历年四级阅读理解逐句翻译:(9)
如何做好四级阅读理解
英语四级的阅读信号词
阅读理解详解15篇(Passage 7)
关于阅读理解中态度类问题
大学英语四级模拟试卷第01组(阅读2)
阅读理解详解15篇(Passage 2)
如何更聪明的阅读事半功倍
Should college students be tutors
历年四级阅读理解逐句翻译:(7)
英语四级考试阅读:科学研究听音乐太久会让人抑郁
历年四级阅读理解逐句翻译:(8)
历年四级阅读理解逐句翻译:(5)
英语四级考试阅读材料:暴雨袭击中国西南部
阅读理解详解15篇(Passage 12)
阅读理解主要测试能力
局部定位法巧妙攻克四级阅读
阅读理解详解15篇(Passage 8)
历年四级阅读理解逐句翻译:(4)
历年四级阅读理解逐句翻译(2)
四级阅读应试技巧浅谈
历年四级阅读理解逐句翻译:(2)
不限 |
英语教案 |
英语课件 |
英语试题 |
不限 |
不限 |
上册 |
下册 |
不限 |