Tech Security Nightmares
Repeat Microsoft zero-day discloser NightmareEclipse is at it again with Windows Defender, this time preventing the antivirus from updating itself. This mischievous researcher, also known as Abdelhamid Naceri, has released a proof-of-concept dubbed “BigDiskBuster” that halts Microsoft Defender Antivirus in its updating efforts. “Created a humorous tool, completely blocks Defender from updating so you’re stuck on your current version if the tool is active in the background,” NightmareEclipse stated with a grin.
BigDiskBuster: The Attitudinal Tool
BigDiskBuster, unlike its troublesome counterpart “UnDefend,” reportedly operates on all supported Windows versions. However, the researcher concedes it’s “somewhat buggy and requires a bit of rewriting [sic].” Whether or not it lives up to that assertion remains uncertain. The PoC doesn’t incapacitate Defender; instead, it waits for an update to initiate before pretending to be a storage-consuming cat. It clogs the drive with concealed temporary files and then frees up space once it halts the update.
Getting Crafty with MRT
What’s ingenious is how BigDiskBuster executes Microsoft’s Malicious Software Removal Tool executable, MRT.exe, to prevent other processes from accessing it. NightmareEclipse believes Defender gets stuck on its existing platform and safety versions for as long as BigDiskBuster continues its sneaky antics. A screenshot illustrating the PoC reveals Windows Security reporting a protection definition update failure with error 0x80070643. But to be honest, that’s merely a generic error code.
Why Stagnant Defenders Spell Trouble
Keeping Defender stranded on outdated security intelligence is evidently rather silly. The antivirus may still be functioning, but lacking the latest threat updates, it’s as beneficial as a chocolate fireguard. NightmareEclipse’s ongoing flow of bugs comes during a dispute with Microsoft regarding their vulnerability disclosure protocol. It appears they’ve been at odds since April, creating quite the spectacle.
Microsoft vs. NightmareEclipse: The Saga Deepens
NightmareEclipse began releasing Windows zero-days in retaliation for being ignored by Microsoft’s vulnerability reporting system. Microsoft was not pleased about it, initially admonishing the researcher for unleashing vulnerabilities into the public domain without warning. They even hinted at legal repercussions but later backtracked, indicating they had “no intention to pursue action against individuals conducting or publishing security research.” The saga continues.
BigDiskBuster: An Enigmatic New Threat
In contrast to other exploits that provide a clear pathway to SYSTEM privileges, BigDiskBuster interferes with the fundamental function of antivirus software: self-updating. There’s no word yet on whether it’s being leveraged in real-world assaults, and its claimed universal applicability across Windows systems has yet to be confirmed.
Microsoft’s Inaction
Redmond hasn’t granted GadgetLad or anyone else any attention regarding these antics. Meanwhile, the Nightmare appears far from finished.
Summary: A Nightmare on Windows Street
So there you have it, everyone. BigDiskBuster is merely the latest jab from NightmareEclipse in their ongoing skirmish with Microsoft. It’s wise to monitor your available space – you wouldn’t want your Defender to take an unplanned snooze!
