Additional Attack Context

Additional context to the latest set of BLSS Cyber Reports. As we are researching the techniques deployed, we found one approach documented in May 2007 that used the Microsoft Patch or Update Service (aka BITS – background intelligent transfer service). This knowledge seems to be well dispersed in the underground hacking community and could be the technique or some variation of the techniques that we have witness in the past few days.

Please see :

New Attack Piggybacks on Microsoft's Patch Service (Washington Post – May 2007)
http://blog.washingtonpost.com/securityfix/2007/05/malware_using_microsoft_patch.html