Hackers write Windows RDP exploit days after MS warning
By Stewart Mitchell
Posted on 16 Mar 2012 at 13:22
SophosLabs says it has seen proof-of-concept code which tries to exploit the recently announced Microsoft Remote Desktop Protocol (RDP) vulnerability, causing PCs to crash.
Earlier this week, Microsoft warned people to install security update MS12-020, which addressed a remote code execution vulnerability in RDP affecting all versions of Windows.
At the time, the software giant said it expected to see hackers targeting the weakness within a month, but Sophos believes exploit code has already been written and published on Chinese websites.
“Microsoft warned earlier this week that it expected malicious hackers to exploit the flaw within 30 days. Well, that's already happening," reports a post on the Sophos blog.
"The code we've seen - in the form of Python scripts - attempts to exploit the MS12-020 RDP vulnerability and causes Windows computers to blue screen.”
Although the code was regarded as a proof of concept, Sophos said it wouldn't be a surprise if whoever was writing this code “further developed the attacks to produce a fast-spreading internet worm”.
Sophos repeated Microsoft's warning to patch as soon as possible.
Is your business a social business? For helpful info and tips visit our hub.
- Hello Cortana, it's nice to meet you
- Windows 8.1 Update: an abject surrender
- The insane economics of Sky Now TV
- No such thing as a free app... so pay up if you want quality
- Time to outlaw crapware-laden installers
- Windows Phone 8.1 video: hands-on
- Office for iPad: key information
- Why every PC buyer owes Richard Durkin a debt of gratitude
- HTC One M8 vs Samsung Galaxy S5: 2014's big-hitters compared
- Windows XP end of life: key information
- How to write your company's IT security policy
- The key to choosing a secure password
- Please stop reposting fake Facebook messages
- Is Facebook safe for business?
- Don't rely on Chrome's password vault
- Facebook Graph Search: don't panic
- Gmail drafts and Pastebin: could they evade the email snoops?
- Applying for a job at GCHQ? Here's your plain-text password
- Google two-step verification: a must for business email
- Yes, I write down my passwords