network shares | DataProtectionCenter.com

Morto: RDP worm of death?

30

Aug

2011

Over the last few days we have seen some media buzz about a worm called Morto. Morto is an old-fashioned internet worm, which targets Windows workstations and servers by exploiting poorly-chosen weak passwords to spread via Remote Desktop Protocol (RDP) connections (port 3389). It’s possible if you had a large number of infected computers within […]

Category General Written by Naked Security - Sophos 0 Comments

DNS changes from W32/Rorpian

24

Aug

2011

We’ve had reports that some systems have had their DNS resolution settings modified to resolve domains from: 188.229.89.121 The IP belongs to a known “bad” /24 netblock in Romania, part of AS43134 (COMPLIFE-AS CompLife Ltd) … a netblock that we had perviously noted within Scrapbook. Which in effect, redirects all web browsing attempts to: hxxp://188.229.89.121 […]

Category Security Written by Zscaler Research 0 Comments

Sality Whitepaper

03

Aug

2011

We’ve published a detailed analysis of Sality in a whitepaper titled, “Sality: Story of a Peer-to-Peer Viral Network.” Sality is a file infector that spreads by infecting executable files and by replicating itself across network shares. Infected hosts join a peer-to-peer network used to propagate malware on the compromised computer. Typically, those additional programs will […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘network shares’

Morto: RDP worm of death?

DNS changes from W32/Rorpian

Sality Whitepaper

Categories

Featured

Archives

Latest Comments

About Us

Contact Us