Microsoft is warning that attackers are abusing a dangerous unpatched Windows vulnerability using impure USB flash drives.

The bug admission is initials that affect Windows XP Service Pack 2 (SP2) as Microsoft retreat the edition from support, researchers said. When Microsoft does secure the fault, it will not be supply a patch for machines yet running XP SP2.

In a safety suggested, Microsoft established what other researchers had been saying for about a month Hackers have been abusing a bug in Windows "shortcut" files, placeholders typically dropped on desktop or into Start menu to symbolize links to real files or programs. "In wild, this vulnerability has been originated operating in combination with Stuxnet malware," Dave Forstrom, a director in Microsoft's Dependable Computing group, said in a post to a corporation blog. Stuxnet is a tribe of malware that contains a Trojan horse that downloads additional attack code, as well as a rootkit that hides proof of the attack.

Forstrom distinguished the threat as "limited, embattled attacks," but Microsoft group liable for crafting antivirus signatures said it had tracked 6,000 attempts to contaminate Windows PCs as of July 15. Siemens aware customers of its Simatic WinCC management software that attacks using Windows vulnerability were targeting PCs used to manage large scale industrial control systems used by major manufacturing and usefulness corporations.