Researchers release Windows 10 UAC malware information

John White By: John White
2 minute read

Home » News » Researchers release Windows 10 UAC malware information

Windows 10 is an operating system that offers increased security among other cool things. However, the improved security features are not perfect as a new vulnerability has been found, and it could open the operating system to malware attacks.

Ironically, the issue has to do with the Windows User Account Controls (UAC), something designed to help Windows block unwanted software and malware.

Security researchers, Matt Nelson and Matt Graeber, were the ones to discover the flaw, and ultimately made it known via the website, Enigmaox3. It details how Windows 10’s SilentCleanup processed can be used by attackers to allow malware to slip through the UAC gate and enter your computer.

Matt Graeber (@mattifestation) and I recently dug into Windows 10, and discovered a rather interesting method of bypassing User Account Control (if you aren’t familiar with UAC you can read more about it here). Currently, there are a couple of public UAC bypass techniques, most of which require a privileged file copy using the IFileOperation COM object or WUSA extraction to take advantage of a DLL hijack. You can dig into some of the public bypasses here (by@hfiref0x). The technique covered in this post differs from the other methods and provides a useful alternative as it does not rely on a privileged file copy or any code injection.

Security researchers tend to recommend that computer owners never use their administrator account for daily computer use since it opens them to the possibility of more attacks, but it doesn’t matter in this regard. You see, UAC and Windows 10’s SilentCleanup process, runs with the highest level of power, so it wouldn’t matter which account you’re using.

Graeber and Nelson said they reported the issue to Microsoft, but the company responded by saying it is not a security problem. Apparently, UAC, to Microsoft, is not security measure hence why the company does not view the problem as a security measure.

Microsoft is either bluffing or the researchers are wrong. However, what is certain right now is that the company has no choice but to release a fix for UAC because it is now out in the open for the entire public to see.

RELATED STORIES YOU NEED TO CHECK OUT:

Windows 10 Anniversary Update ISO will arrive on August 2

Discussions

Next up

How to fix There was a problem connecting to Gmail error

Loredana Paraianu avatar. By: Loredana Paraianu
3 minute read

Google’s webmail service is fast, smooth and functional, but sometimes you might get There was a problem connecting to Gmail error. Do you also have […]

Continue Reading

Windows 10 v1903 blocked on PCs running 3rd-party antivirus tools

Rabia Noureen avatar. By: Rabia Noureen
2 minute read

Microsoft confirmed that third-party antivirus products are causing Windows machines to suddenly freeze. The issue appears on different Windows versions after users installed the April 2019 […]

Continue Reading

We couldn’t add all your attachments the Mail app error [FIX]

Matthew Adams By: Matthew Adams
3 minute read

The Mail and Calendar app, which comes included with Windows 10, enables users to attach files to emails much the same as most email software. […]

Continue Reading