This Windows 10 Flaw Allows Hackers Open Malicious Websites On A Locked PC

You may think your Windows 10 computer is locked, but do you think it is really locked?

Israeli Tech researchers Tal Be’ery and Amichai Shulman have discovered a loop in the OS by using just voice commands to make locked Windows 10 computers visit a website under the control of a malicious hacker… and potentially install a dangerous malware.



The problem lies in the Cortana inbuilt pc utility which is the voice assistant that Microsoft built into Windows 10. Unless properly controlled, these voice assistants can be a potential weakness on modern devices, opening opportunities for unauthorized users to perform malicious activities and attacks from the lock screen.

As the researchers explains; a hacker could sit at a locked Windows 10 PC and insert a USB network adapter. With that in place, a hacker can simply give a verbal command to Cortana to open the web browser and head to an unencrypted HTTP webpage from where he can install a malware into the Window 10 PC.

The adapter inserted into the USB drive intercepts the request, but redirects the browser to a malicious webpage instead.

A YouTube video demonstrates the exploit in action:


As Motherboard explains, with one computer infected in an organisation there exists the possibility for an attacker to spread  malware to other devices on the same computer network, stealing information on the individual computers.

Why does Cortana continue to listen for voice commands even when a Windows 10 PC is locked? Well, your guess might be as good as mine – but this is clearly a big problem, especially when you consider that many will not have bothered to train their PC to only obey a single user’s voice.

For that reason, I have deemed it right to recommend that Windows 10 users disable voice commands entirely when the PC is locked. Now, if you want to have a chat with your computer, then take a few seconds to unlock it first.

The truth is that if someone should get physical access to your computer, even if you have it locked, it may only take them a minute or so to install malicious code. Even if you have logged off and turned off the power, there’s still possibility for a criminal to go into your BIOS and tell the computer to temporarily boot up from a USB stick containing a dangerous computer malware.

When you come back five minutes later you really have no clue what’s been happening in your absence.

The vulnerability was responsibly disclosed to Microsoft co-operation and has already been patched by taking browser-based commands directly to the Bing search engine.

However, as there remains the possibility of Cortana to execute other commands that could perhaps be hijacked by an attacker, I find myself asking once again whether voice assistants are really that useful for the majority of us.

Now, this is the big question, Do the benefits of a a voice assistant outweigh the risks?

Bright Mac

12 comments:

  1. Hi, I read your new stuff like every week.
    Your story-telling style is awesome, keep doing what
    you're doing!

    ReplyDelete
  2. Just want to say your article is as surprising.
    The clarity in your post is just spectacular and
    i can assume you're an expert on this subject. Well with your permission let me to grab your feed to
    keep updated with forthcoming post. Thanks a million and
    please keep up the gratifying work.

    ReplyDelete
  3. I really like your blog.. very nice colors & theme. Did you create this website yourself or
    did you hire someone to do it for you? Plz reply as I'm
    looking to construct my own blog and would like to know where u got this from.
    appreciate it

    ReplyDelete
  4. I'm gone to inform my little brother, that he should also pay a quick visit this webpage
    on regular basis to get updated from most up-to-date news update.

    ReplyDelete
  5. Incredible! This blog looks just like my old one!

    It's on a totally different subject but it has pretty much the same
    layout and design. Excellent choice of colors!

    ReplyDelete
  6. You're so awesome! I don't believe I have read through something like this before.
    So great to find someone with original thoughts on this subject.
    Really.. many thanks for starting this up. This website is
    something that's needed on the internet, someone with a bit of originality!

    ReplyDelete
  7. Today, I went to the beachfront with my children. I found a sea shell and gave it to
    my 4 year old daughter and said "You can hear the ocean if you put this to your ear."
    She put the shell to her ear and screamed. There was a hermit crab inside and it
    pinched her ear. She never wants to go back! LoL I know this is entirely off topic but I
    had to tell someone!

    ReplyDelete
  8. I like it when individuals get together and share views.

    Great site, stick with it!

    ReplyDelete
  9. I’m not that much of a online reader to be honest but your blogs really nice, keep it
    up! I'll go ahead and bookmark your site to come back later.

    Many thanks

    ReplyDelete
  10. WOW just what I was searching for. Came here by searching for Power Quality Analyzer

    ReplyDelete
  11. Hmm is anyone else having problems with the pictures on this blog loading?

    I'm trying to figure out if its a problem on my end or if
    it's the blog. Any feed-back would be greatly appreciated.

    ReplyDelete
  12. First of all I would like to say wonderful blog!

    I had a quick question which I'd like to ask if you
    don't mind. I was interested to find out how you center yourself and clear your thoughts
    before writing. I have had trouble clearing my mind in getting my ideas out.
    I do enjoy writing but it just seems like
    the first 10 to 15 minutes are wasted simply just trying to figure out how to
    begin. Any ideas or hints? Thanks!

    ReplyDelete