Win10 Enterprise Edition can be infected by a fake Windows update attack and the system is infected with malware.

According to the latest report of the famous security company Context, hackers can use Windows Server Update Service (WSUS) to attack Windows, such as Win10 Enterprise Edition. The system is infected with malware. So how do hackers do it?

One of the methods is to intercept the service and inject malicious false Windows updates into it. After the relevant users are installed, they will be "suggested".

At present, WSUS is still using unencrypted HTTP, which is far less secure than HTTPS with encryption. According to the Context message, since WSUS does not use SSL (HTTPS), it is highly vulnerable to "middle man" attacks. Researchers Alex Chapman and Paul Stone say that hackers can attack by pushing fake malicious patches even in lower-privilege situations.

The report also said: "What we care about is when plugging in USB devices, some of which may be vulnerable and exploited by hackers. The familiar "look for drivers" and "Windows Updates" dialog boxes, these seemingly harmless windows may hide some serious dangers. ”

This organization has extended a more difficult way to discover the threat from the vulnerability. The attack process may not be undetectable, but you will not think at all. That's in the "invasion" or "attack", so when you find a problem, you don't know how your system is "dead".