Windows 8 security problems uncovered

Two new viruses target users
Tools

Hackers and security firms are already going after the much hyped Microsoft (Nasdaq: MSFT) Windows 8 operating system (OS).

According to a blog by security firm Trend Micro, hackers have launched fake anti-virus software and phishing scams against the most recent Windows OS. The fake anti-virus scam involves infection of a device after the user visits a malicious website. The other scam offers the recipient a free version of Windows 8 if he visits a website. Instead of a Windows 8 download, the victim is led to a phishing site asking for personal information that can be sold in the underground market, the blog warned.

In addition, security firm Vupen is claiming it found "multiple vulnerabilities" in Windows 8 as well as Internet Explorer 10.

"We have researched and discovered multiple vulnerabilities in Windows 8 and Internet Explorer 10 that we have combined together to achieve a full remote code execution via a Web page which bypasses the new exploit-mitigation technologies included in Win8," Vupen Chief Executive Chaouki Bekrar said in a statement emailed to PCWorld.

Microsoft declined to comment on Vupen's claims. Dave Forstrom, director of Microsoft Trustworthy Computing, said in a statement obtained by PCWorld: "We continue to encourage researchers to participate in Microsoft's Coordinated Vulnerability Disclosure program to help ensure our customers' protection."

Microsoft is betting Windows 8 will help it regain its dominance of the corporate OS market and fight off recent inroads made by Apple (Nasdaq: AAPL) and Google (Nasdaq: GOOG), particularly in the mobile BYOD space. Having security issues exposed so soon after Windows 8's release will not help Microsoft in that effort.

For more:
- see this Trend Micro blog post
- read the PCWorld article

Related articles:
Microsoft CEO: 'Tens of millions' of corporate Windows 8 licenses sold
Microsoft: Windows Phone 8 to launch with top hardware, most popular apps