Trojan targets Windows Update

Security expert Frank Boldewin said on his website reconstructer.org that the method hijacks Windows security patches enabling hackers to continually update the malware on an infected computer.

Already one program is in circulation which effectively bypasses users' firewall, allowing files to download undetected. Microsoft says it is aware of the problem and is working on a fix.

Boldewin said he had recently noticed the e-mailed trojan which was exploiting a Windows program known as the Background Intelligent Transfer Service (BITS).

Because BITS is part of the operating system, it is able to bypass local firewalls while it downloads. The trojan piggybacked on BITS to download malicious files.

More here. µ