Skip to main content

NSA hacking tools being used to attack thousands of computers

It’s been over a year since many of NSA’s exploits leaked online and as a result, over hundreds of thousands of computers remain unpatched and vulnerable to date. These exploits were initially used to spread ransomware and cryptocurrency mining attacks but now, it seems hackers are using the leaked tools to create an even larger malicious proxy network, reports TechCrunch. Akamai, the American content delivery network, did some digging around and found that the previously reported UPnProxy vulnerability, which misuses the common Universal Plug and Play network protocol, is now capable of targeting unpatched computers behind the router’s firewall. “While it is unfortunate to see UPnProxy being actively leveraged to attack systems previously shielded behind the NAT, it was bound to happen eventually,” commented Akamai’s Chad Seaman, the author of the report. The new injection attacks use two exploits: EternalBlue (for Windows computers) and EternalRed (for Linux machines), which are backdoors created by the NSA to target computers. While UPnProxy modified the port mapping on a router that was vulnerable, the two Eternal exploits target the service ports used by SMB, which is a common networking protocol used on most computers. Akamai calls the two exploits EternalSilence collectively. “The goal here isn’t a targeted attack,” added Seaman. “It’s an attempt at leveraging tried and true off the shelf exploits, casting a wide net into a relatively small pond, in the hopes of scooping up a pool of previously inaccessible devices.” The problem is Eternal-based attacks are hard to detect. So it becomes difficult for administrators to even know if they’re attacked. Though fixes for the Eternal-based attacks have been around for a over a year, many computers remain unpatched and therefore, vulnerable. According to Seaman, flashing an affected network router and immediately disabling UPnProxy could solve the issue but completely replacing the router is always better.

from Latest Technology News https://ift.tt/2zuL7hB
Labels:

Comments

Post a Comment

Popular posts from this blog

What if a botched Google search card says you are a serial killer

Many of us have come to heavily rely on Google Search and often don’t question the veracity of information Google cherry-picks from the vast data available on the world wide web for its search cards. This incident, which is one part funny and two parts scary, makes it clear that Google’s Knowlege Graph may not be as sacrosanct as you may have believed.  Hristo Georgiev was informed by a former colleague that a Google search of his name returned a Google Knowlege Graph that depicted his photo and linked it to a Bulgarian rapist and serial killer of the same name, also known as ‘The Sadist’, who murdered five people back in the 1970s and was later executed by shooting.  The graph linked the info to a Wikipedia article, which incidentally had no link to any of Georgiev’s profile or his image. It was Google’s algorithms that erroneously matched the two. What’s even more problematic is that Hristo Georgiev is not a unique name and is shared by hundreds of other people.  As...
Post a Comment
Read more

MWC 2023: A comparison of the top 4 Xiaomi 13 vs Xiaomi 13 Pro features

Xiaomi launched the Xiaomi 13 and Xiaomi 13 Pro globally a day before MWC 2023. And if you are planning to buy a new Xiaomi flagship phone, you may need clarity on the Xiaomi 13 and Xiaomi 13 Pro differences. The latter is the bigger, better, and pricier model of the two.  So, what we will be doing here is comparing the specs, features and price of these two phones and finding out which one better fits your bill. Xiaomi 13 vs Xiaomi 13 Pro comparison These differences between Xiaomi 13 and Xiaomi 13 Pro might affect your buying decision. We will be comparing the two Xiaomi phones based on their design, display, performance factors, battery, camera, and price. 1. Design Xiaomi 13 Pro is slightly thicker and heavier than Xiaomi 13. It comes with Gorilla Glass Victus protection on the front and a ceramic back option. 2. Display Xiaomi 13 Pro has got a curvy-edged display whilst the regular 13 has a flat front panel. The Pro model has an LTPO screen which means an adaptive refres...
Post a Comment
Read more