A major spike in activity targeting TCP Port 1025 on Windows systems may be a sign that attackers are gathering intelligence for an upcoming attack, Symantec says. Microsoft acknowledged last Thursday that a bug in Windows 2000 Server and Windows Server 2003 can be exploited by sending a malicious RPC packet via Port 105 or higher. Microsoft has recommended that businesses block all inbound unsolicited traffic on ports 1024 and greater greater than greater than that port. The companys next scheduled patch day is three weeks away, on May 8.”]

