viralamo

Menu
  • Technology
  • Science
  • Money
  • Culturs
  • Trending
  • Video

Subscribe To Our Website To Receive The Last Stories

Join Us Now For Free
Home
Technology
Hackers are using a severe Windows bug to backdoor unpatched servers
Technology

Hackers are using a severe Windows bug to backdoor unpatched servers

21/10/2020

“The takeaway for me is attackers are spraying the Internet to provide backdoors into unpatched Active Directory systems in an automated fashion,” Beaumont told Ars. “That isn’t great news. It’s not super sophisticated, but these attackers are doing something effective—which is usually more problematic.”

Friday’s findings are the most detailed yet about in-the-wild attacks that exploit the critical vulnerability. Late last month and again earlier this month Microsoft warned that Zerologon was under active attack by hackers, some or all of them part of a threat group dubbed Mercury, which has ties to the Iranian government. A few weeks ago, Beaumont’s honeypot also detected exploit attempts.

Researchers gave the vulnerability the name Zerologon because attacks work by sending a string of zeros in a series of messages that use the Netlogon protocol, which Windows servers rely on for a variety of tasks, including allowing end users to log in to a network.

People with no authentication can use the exploit to gain domain administrative credentials, as long as the attackers have the ability to establish TCP connections with a vulnerable domain controller. In some cases, attackers may use a separate vulnerability to gain a foothold inside a network and then exploit Zerologon to take over the domain controller, the Department of Homeland Security’s cybersecurity arm—the Cybersecurity and Infrastructure Security Agency—said last Friday. The agency said exploits were threatening government-controlled election systems.

To be effective, honeypots generally must let down defenses that are standard on many networks. In that sense, they can give a one-sided view of what’s happening in the real world. Beaumont’s results are nevertheless illustrative both of the effectiveness of current Zerologon attacks and the concerning results they achieve.

Source link

Share
Tweet
Pinterest
Linkedin
Stumble
Google+
Email
Prev Article
Next Article

Related Articles

TechCrunch’s Favorite Things of 2019
TechCrunch ist jetzt Teil der Verizon Media-Familie. Wir (Verizon Media) …

After 2019’s reality check, what’s ahead for driverless cars in 2020?

Our PlayStation 5 is coming, Hideo Kojima’s new game, and more | GamesBeat Decides 169
One of our PlayStation 5s arrived today, but editor Mike …

Our PlayStation 5 is coming, Hideo Kojima’s new game, and more | GamesBeat Decides 169

Leave a Reply Cancel reply

Find us on Facebook

Related Posts

  • Beat Saber is now an Oculus studio after Facebook acquisition
    Microsoft’s game streaming service Project xCloud launches …
    12/02/2020
  • Xbox Game Pass gets Overcooked 2, Pathologic 2, and more in December
    Xbox Game Pass gets Overcooked 2, Pathologic …
    04/12/2019
  • Attackers exploit 0-day code-execution flaw in the Sophos firewall
    Attackers exploit 0-day code-execution flaw in the …
    27/04/2020
  • PUBG keeps winning the influencer battle royale
    PUBG keeps winning the influencer battle royale
    24/11/2020
  • Broadband speeds fall in dozens of big US cities during pandemic
    Broadband speeds fall in dozens of big …
    27/03/2020

Popular Posts

  • Ars online IT roundtable Thursday: What’s the future of the data center?
    Ars online IT roundtable Thursday: What’s the …
    19/01/2021 0
  • Top 10 Crazy Ways To Get Free …
    21/12/2020 0
  • Chinese face-scanning firm CloudMinds rebrands U.S. unit after blacklisting
    Chinese face-scanning firm CloudMinds rebrands U.S. unit …
    21/12/2020 0
  • Real estate software and data analytics company RealPage to be acquired for $10.2 billion
    Real estate software and data analytics company …
    21/12/2020 0
  • Bolt raises $75 million to fight ecommerce fraud with machine learning
    Bolt raises $75 million to fight ecommerce …
    21/12/2020 0

viralamo

Pages

  • Contact Us
  • Privacy Policy
Copyright © 2021 viralamo
Theme by MyThemeShop.com

Ad Blocker Detected

Our website is made possible by displaying online advertisements to our visitors. Please consider supporting us by disabling your ad blocker.

Refresh
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.I AgreePrivacy policy