“The worm chooses the IP addresses of random machines to infect and attack, similar to other worms which exploit the same LSASS vulnerability,” the company said in an advisory. The appearance of the worm (also known as Padobot) spreading through the LSASS flaw is a clear indication that PC users have not yet applied the MS04-011 security fix issued by Microsoft on April 13.Īccording to research firm F-Secure, the network worm is capable of opening TCP ports 113, 30 to receive commands from the virus writers. Anti-virus firms have detected yet another worm exploiting the Local Security Authority Subsystem Service (LSASS) vulnerability that was patched by Microsoft in its April batch of security updates.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |