BlueKeep malware probably won't be your next big security challenge

Hacker using laptop. Hacking the Internet

Believed to have been first reported by cyber-security researcher, Kevin Beaumont, the BlueKeep campaign is apparently being carried out at least over the past two weeks.

United Kingdom researcher Marcus Hutchins single-handedly stopped WannaCry from spreading after discovering a "kill switch" for its propagation methods.

What makes BlueKeep scary is how it's "wormable" and can be exploited without any interaction from the computer's owner. While other security researchers had deleted the all-important exploit code before releasing their demo modules, Metasploit's version was advanced enough for remote code execution, which is why it is now being exploited by criminals. The BlueKeep vulnerability exists in unpatched variations of Home windows Server 2003, Home windows XP, Home windows Vista, Home windows 7, Home windows Server 2008 and Home windows Server 2008 R2.

Administrators should also patch internal systems against BlueKeep, as history has shown that worms can spread to these as well. Hutchin noted that the attack likely used a predefined list of vulnerable machines.

Hutchins suspected they're due to a BlueKeep worm making the rounds. So, if you're business or someone who uses RDP services quite often, then you should always stay up to date with the latest patch provided by Microsoft. BlueKeep functions as a wormable attack, thereby allowing one infected computer to gain access to all other devices on the network.

"One might theorize that attackers know they have essentially one shot at using it at scale, and it becomes a game of chicken as to who will do it first".

More news: Katie Taylor has weighed in for tonight's WBO super lightweight title fight

The only good news from the attacks so far is that the payload is just a coin miner that exploits CPU power to mine the Monero cryptocurrency.

The perpetrators are now targeting vulnerable Windows systems with Remote Desktop Services (RDP) 3389 ports open to the Internet. Hutchins has published a deep technical analysis of the BlueKeep attacks, noting via Twitter that the coin-mining software may be created to generate monero, a cryptocurrency created to maintain users' privacy.

Update: according to netflow it won't appear to be self propagating, I presume a record of vulnerable IPs are being fed to a server which performs the exploitation.

But these unique BlueKeep attacks you should not appear to be to do the job.

At a single point in the future, some lower-experienced danger actor will determine out how to operate BlueKeep correctly, and that is when we will see it used a lot more broadly.

Related News:

  • "Guardian Of The Forest" Killed In Amazon Ambush

    Guajajara was the leader of an indigenous group seeking to protect the Arariboia indigenous reserve from incursions in Maranhao state.
    Stephen Strasburg opts out of contract

    Stephen Strasburg opts out of contract

    Strasburg, who was the No. 1 overall pick out of San Diego State in 2009, is 112-58 with a 3.17 ERA in 10 major league seasons. Strasburg's previous contract had an average annual value of $25 million.
    Rodgers rips Packers' road focus after blowout loss to Bolts

    Rodgers rips Packers' road focus after blowout loss to Bolts

    Rodgers got most of his yards in the final 15 minutes after he was held to a career-low 61 yards through three quarters. At times in the first half it felt like Green Bay was losing 21-0, but they were only own 9-0 heading into halftime.
  • Journalist E. Jean Carroll files defamation suit against Trump

    Journalist E. Jean Carroll files defamation suit against Trump

    As regular readers may recall , in June, she also joined a long list of women who've accused Donald Trump of sexual misconduct. Trump ran into Carroll at Bergdorf Goodman after previously meeting once before, according to the lawsuit.
    Microsoft's New Browser Ships in January with New Icon and More Privacy

    Microsoft's New Browser Ships in January with New Icon and More Privacy

    Microsoft does understand that and has released a new logo for the upcoming Chromium based Edge browser. Microsoft introduced Edge in 2015, and positioned it as a fast, lightweight and secure browser.
    Jayson Tatum thrills as Celtics edge out Knicks, 104-102

    Jayson Tatum thrills as Celtics edge out Knicks, 104-102

    "I've got to keep working at it though". "The guys I look up to in this league, they do things like this all the time". Ntilikina started at level guard, the assign the Knicks were with out Elfrid Payton (hamstring), Dennis Smith Jr .
  • 29 injured as bus travelling from Paris to London overturns

    29 injured as bus travelling from Paris to London overturns

    The accident took place just outside the village of Ablaincourt-Pressoir in the Somme region at 12 pm local time. There were 33 people on board, of whom 29 sustained light injuries and four were seriously wounded.
    Spurs' Son in tears after Everton's Gomes injury; Foxes 3rd

    Spurs' Son in tears after Everton's Gomes injury; Foxes 3rd

    The TV replay suggested that Gomes suffered the injury after Son's tackle and before he collided with full-back Serge Aurier . The Portuguese footballer was in the midfield taking the ball forward when he was tackled by Tottenham forward Son Heung-min.
    Appeals Court Rules President Trump Must Turn Over Tax Returns to DA

    Appeals Court Rules President Trump Must Turn Over Tax Returns to DA

    Vance, who is a Democrat, is conducting a probe into payments that Trump allegedly made before the 2016 election. A lower court found that argument "repugnant to the nation's fundamental structure and constitutional values".
  • Florida-Georgia pre-party: Duuuval's Bold City Bash

    Florida-Georgia pre-party: Duuuval's Bold City Bash

    Lawrence Cager put the game out of reach for Florida when he scored a 52-yard touchdown with just over 10 minutes remaining. The Gators will also return home to host Vanderbilt, who they have beaten in 27 of the 28 times they have faced off.
    United Kingdom  lawmakers elect Lindsay Hoyle as new speaker

    United Kingdom lawmakers elect Lindsay Hoyle as new speaker

    The MP for Chorley has been a popular and experienced figure in the house, having first been elected in the constituency in 1997. Each candidate will receive five minutes to address legislators before they make their decision through a secret ballot vote.
    Schmeichel slams work rate of very average Manchester United

    Schmeichel slams work rate of very average Manchester United

    Ole said that in order to climb up to the fourth position, these are the games that need to be won. "[Solskjaer] also gone level with Tim Sherwood, though, tbf, he has managed five more than him".


Most liked

Where to look in Dockyard Deal Loading Screen
As you can likely guess, the hidden T is located in Dirty Docks (as suggested by the Dockyard Deal title of the Loading Screen). Unlocking the image tells players where the hidden T can be found, and it also makes the special object appear in-game.

Trump Admin Officially Withdraws from Paris Climate Agreement
The Trump administration is beginning the process to leave the Paris agreement on the first day possible under its complex rules. Thousands of school kids and college students in New York City walked out of class on March 15, 2019 to protest climate change.

Madrid and Bale deny offer for Sterling
But with 24-year-old Sterling's value continuing to rise, Real president Florentino Perez is keen to press ahead with an approach.

Galaxy S11 May Utilize A "New 108-Megapixel Camera Sensor"
The worldwide version of the phones will carry the yet to be announced Exynos 9830 chipset under the hood. Xiaomi is launching the Mi CC9 Pro smartphone tomorrow that comes equipped with this very same sensor.

Roger Penske bullish on future of Brickyard, IndyCar doubleheaders
Want your voice heard? The team are effectively set to compete in a championship that their subsidiary now owns. Penske Corp.is a transportation services company with revenues of more than $32 billion, per its website.

Red Dead Redemption 2's PC version lacks ray tracing
It should be noted that you can only do this if you have pre-ordered the game and have the Rockstar Games Launcher installed. During the same interview, Hajadj also had the opportunity to talk about the support for Red Dead Redemption 2 mods.

New Facebook logo signals merging of its properties
The new Facebook Inc logo is expected to be put to use in the "coming weeks" within Facebook products and marketing materials. The new logo will appear on press releases in the future, as well as headline a new corporate website.

Airbnb imposes a party house ban after deadly shooting
In that instance, Airbnb confirmed the house where the shooting happened had been rented out during the night in question. In July, two people were killed during a party at an Airbnb in Pittsburgh.

Kim Kardashian shared a family Halloween photo with a hilariously bad Photoshop
Saint and North West went as Fred and Wilma Flintstone , when Saint and Psalm had been Pebbles and Bam Bam. His large mask came equipped with little tongues that were engineered to move around.

Cam Newton May Be Put On Injured Reserve
Newton completed 56.2 percent of his throws for 572 yards and an interception in his two starts this season. Cam Newton won't need to undergo surgery on his foot after seeing renowned specialist Dr.

Missing Kiwi tourist found floating in inflatable dinghy off Crete
She phoned her husband that afternoon to tell him she had finished shopping and was heading back to the boat but never returned. A navy helicopter and six vessels were involved in her search before her dinghy was spotted by a coastguard on patrol.

India decides against joining RCEP as key concerns remain unaddressed
In the RCEP FTA work programme, India, China, Australia and New Zealand have been asked to resolve the issue. Eleven countries remain in that pact after President Donald Trump pulled out shortly after taking office.

Read Marie Yovanovitch’s full testimony in Trump impeachment inquiry
Yovanovitch was the top US diplomat in Ukraine who the president called "bad news" in his July phone call to Ukraine's president. Marie Yovanovitch , the ousted U.S. ambassador to Ukraine , told House impeachment investigators last month that U.S.

Man pleads not guilty as Lincoln graduate Grace Millane's murder trial begins
Millane's body was later found in a section of bush just 10m off Scenic Drive in West Auckland's Waitakere Ranges on December 9. The Crown's case will be prosecuted by Robin McCoubrey, Brian Dickey and Litia Tuiburelevu of Meredith Connell.

Tom Brady: New England Patriots loss to Baltimore Ravens 'not good enough'
For the second straight game, cornerback Marlon Humphrey has turned a fumble recovery into a touchdown for the Baltimore Ravens . None of that seemed to matter to the Ravens, who scored on each of their first three possessions to take a 17-0 lead.