Product

Windows XP

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 17, 2026 · last 8d ago

Timeline2 articles

Bill Gates tries to install MovieMaker (2003)

A newly surfaced 2003 internal email shows Bill Gates criticizing Microsoft.com's download flow, Windows Update, and overall Windows usability.

The January 15, 2003 email from Bill Gates to Jim Allchin details his failed attempts to install Movie Maker, citing repeated timeouts, a confusing download page, and a 17 MB Windows Update download with forced reboot. Gates called the experience a 'systematic degradation' of Windows usability and trashed the cluttered add/remove programs list. The newsletter publishes internal tech industry emails that have surfaced in public records.

Hacker News · AISep 7, 15:27 UTC · 8d agoOther HN 406↑ · 277 comments

Tick Group Weaponized Secure USB Drives to Target Air

Unit 42 says the Tick group weaponized South Korean certified secure USB drives with SymonLoader malware to reach air-gapped Windows XP systems.

Unit 42 discovered that the Tick cyberespionage group, which targets Japan and South Korea, compromised an ITSCC-certified secure USB drive made by a South Korean defense company and used a new loader named SymonLoader to extract a hidden executable from these drives. SymonLoader only infects Windows XP and Windows Server 2003, suggesting deliberate targeting of legacy air-gapped systems used by government and defense organizations. The group also delivered HomamDownloader and SymonLoader via Trojanized Korean and Japanese software sent as spearphishing attachments. Unit 42 believes the attacks occurred multiple years ago and that this malware is not part of an active campaign.

Palo Alto Unit 42Aug 17, 12:55 UTC · 29d agoThreat actor in the wild

Appears with

vendor Microsoft 2 malware Datper 1 malware HomamDownloader 1 malware Minzen 1 malware Nioupale 1 malware SymonLoader 1 organization ITSCC 1 product Movie Maker 1 product Windows Server 2003 1 product Windows Update 1 threat actor Tick 1 vendor Palo Alto Networks 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.