• Björn Tantau@swg-empire.de
    link
    fedilink
    English
    arrow-up
    34
    ·
    10 months ago

    That’s basically how the Sasser worm came to be. A hacker found a buffer overflow in the LSASS service, used that to replicate and then shut down the vulnerable service. But apparently he failed to account for Windows shutting down when LSASS was stopped, leading to a bootloop.

    In the end it lead to massive damages when it actually was supposed to be a cure.