More BlueKeep attacks expected, says Microsoft

[Bradley Prior]

More BlueKeep attacks expected, says Microsoft

Microsoft believes that there could be many more BlueKeep attacks which will be significantly more destructive than those reported so far.

This comes after the first instances of BlueKeep being used in the wild to execute a malware campaign was recently detected.

 

[irBosOtter]

Yeah well guess a few of our municipalities servers will go down soon... plus PetroSA....


Register here

Shodan

Search engine of Internet-connected devices. Create a free account to get started.

www.shodan.io

Do a search for "port 3389 south africa" and it shows you all the servers that have port 3389 open in SA, well, ones that have been found so far

Fired up Kali Linux, tested most of them and they are all vulnerable

 

[Arthur]

/ checks pfSense firewall
/ no open 3389
/ relieved

 

[elf_lord_ZC5]

MyBroadband need more advertising revenue ...

 

[ActivateD]

Yeah well guess a few of our municipalities servers will go down soon... plus PetroSA....


Register here

Shodan

Search engine of Internet-connected devices. Create a free account to get started.

www.shodan.io

Do a search for "port 3389 south africa" and it shows you all the servers that have port 3389 open in SA, well, ones that have been found so far

Fired up Kali Linux, tested most of them and they are all vulnerable

View attachment 738635

View attachment 738637

Just be careful with connecting to services with your IP address. You are not authorized and some organisations may take offence to you even scanning them or even connecting to them.

 

[irBosOtter]

Just be careful with connecting to services with your IP address. You are not authorized and some organisations may take offence to you even scanning them or even connecting to them.

What makes you think I would connect from my IP?

Edit: Someone from "China" took down a SA server last night.....