FINANCIAL NEWS FAST

Hackers are using a severe Windows bug to backdoor unpatched servers

Hackers are using a severe Windows bug to backdoor unpatched servers

Enlarge (credit: Getty Images)

One of the most critical Windows vulnerabilities disclosed this year is under active attack by hackers who are trying to backdoor servers that store credentials for every user and administrative account on a network, a researcher said on Friday.

Zerologon, as the vulnerability has been dubbed, gained widespread attention last month when the firm that discovered it said it could give attackers instant access to active directories, which admins use to create, delete, and manage network accounts. Active directories and the domain controllers they run on are among the most coveted prizes in hacking because once hijacked, they allow attackers to execute code in unison on all connected machines. Microsoft patched CVE-2020-1472, as the security flaw is indexed, in August.

On Friday, Kevin Beaumont, working in his capacity as an independent researcher, said in a blog post that he had detected attacks on the honeypot he uses to keep abreast of attacks hackers are using in the wild. When his lure server was unpatched, the attackers were able to use a powershell script to successfully change an admin password and backdoor the server.

Read 6 remaining paragraphs | Comments

Attackers are spraying the Internet to backdoor unpatched Active Directory systems.Read More

Share:

Share on facebook
Facebook
Share on twitter
Twitter
Share on pinterest
Pinterest
Share on linkedin
LinkedIn
On Key

Related Posts

Fortune Org is an international news provider focusing on trusted financial, political, and world news for professionals and organizations. Our editor in chief Brian Edwards runs our tight-knit team of investigative journalists and finance researchers from the UK and Australia that contribute to curated news content, op-eds, and investigative pieces.

Financial News Fast

Copyright © 2020 Fortune Org.