Chinese hackers attacked UK Government targets during the Christmas holidays using the Microsoft Windows Meta File (WMF) exploit. The attacks - initiated before Microsoft's patch against the vulnerability was released on January 5 - came in the form of contamination emails that originated in China, according to email filtering firm MessageLabs, whose clients include the UK Government. It's unclear if independent hackers or the Chinese Government initiated the attack.

Contaminated messages posed as information about a secret rendezvous were sent to around 70 people in parliament and elsewhere in the UK Government, ZDNET reports. Attackers tried to dupe intended recipients into opening an infected attachment containing the WMF Setabortproc Trojan, but the infected emails were blocked by MessageLabs' email filtering system. Some of the attacks were aimed as departments in the UK Government dealing with human rights abuses, The Guardian reports.

Ordinary consumers, as well as Government, remain exposed to attacks based on the WMF vulnerability.

Anti-virus firm F-Secure says the majority of Windows PCs remain vulnerable to the WMF exploit because users are yet to apply Microsoft's patch. The firm recently detected a phishing scam that exploited the vulnerability in an attempt to install a spyware Trojan on vulnerable PCs. F-Secure reiterates advice to Windows users to apply Microsoft's patch, warning that the WMF exploit is likely to prove fertile ground for "various different attackers for months, possibly years". ®

Related stories

• Home Secretary in ID card gaffe (7 March 2008)
• MI5 warns over China hacking menace (3 December 2007)
• Updated France blames China for hack attacks (12 September 2007)
• MS anti-Trojan shield fails to protect older Offices (6 June 2007)
• Chinese crackers attack US.gov (9 October 2006)
• Unpatched enterprise security bugs proliferate (24 August 2006)
• MySpace adware attack hits hard (21 July 2006)
• MS advises users to play safe with Word (24 May 2006)
• Trojan exploits unpatched Word vulnerability (22 May 2006)
• Seven patches for St Valentine's patch Tuesday (15 February 2006)
• Drive-by downloads on the wane (7 February 2006)
• Book review The Art of Intrusion (26 January 2006)
• Windows back door rumor is bunk (21 January 2006)
• Zero-day WMF flaw underscores patch problems (13 January 2006)
• Microsoft backtracks on WMF patch (6 January 2006)
• World+dog scrambles to fight Windows flaw (3 January 2006)
• Trojan alert over unpatched Windows flaw (29 December 2005)
• Malware maelstrom menaces UK (18 July 2005)
• Spyware blizzard shows no sign of let up (29 June 2005)
• UK trojan siege has been running over a year (17 June 2005)
• UK under cyber blitz (16 June 2005)