One of the latest Zero-Day exploits infecting Windows computers is a worm called Morto and it uses the Remote Desktop Protocol (RDP), generating large amounts of outbound RDP traffic on port 3389 (the default port for RDP) and compromising both desktop and server systems, including those that are fully patched. It basically uses a brute force password attack to attempt to log onto the Remote Desktop servers as an administrator. If you aren’t using the Remote Desktop feature, you should turn it off. You can also change the port that it uses, or require remote users to establish a VPN to connect to their internal computers. Complex passphrases will help to protect against the brute force attack. Find out more here:
About The Author
Debra Littlejohn Shinder is a technology and security analyst and author specializing in identity, security and cybercrime, utilizing her past experience as a police officer and police academy/criminal justice instructor. She has written numerous books and articles for web and print publications and has been awarded the Microsoft MVP designation for fourteen years in a row.