Microsoft has revealed that hackers have exploited a previously unknown bug in the company’s Windows operating system to infect computers with the “Duqu” virus. Many security experts are saying the “Duqu” virus could be the next big cyber threat.
“We are working diligently to address this issue and will release a security update for customers,” Microsoft stated in response to the treat.
The threat of Duqu originally surfaced in October of this year when security firm Symantec discovered a mysterious computer virus that contained code similar to Stuxnet, a piece of malicious software believed to have wreaked havoc on Iran’s nuclear program.
Security experts believe Duqu was developed by sophisticated hackers to help lay the groundwork for attacks on critical infrastructure like power plants, oil refineries, and pipelines.
Microsoft disclosed its connection to the infection by disclosing how the virus is targeted to victims via emails containing tainted Microsoft Word documents. Once opened, the victim’s computer would be infected and the attacker would be able to take control of the machine and wreak havoc on the organization’s network.
“Microsoft is collaborating with our partners to provide protections for a vulnerability used in targeted attempts to infect computers with the Duqu malware. We are working diligently to address this issue and will release a security update for customers through our security bulletin process,” Microsoft stated. Microsoft’s next scheduled security updates will be released on November 8th.
