Blog | G5 Cyber Security

Port Scan Spike Could Indicate Attackers Use of Latest Windows DNS Server Exploit

A major spike in activity targeting TCP Port 1025 on Windows systems may be a sign that attackers are gathering intelligence for an upcoming attack, Symantec says. Microsoft acknowledged last Thursday that a bug in Windows 2000 Server and Windows Server 2003 can be exploited by sending a malicious RPC packet via Port 105 or higher. Microsoft has recommended that businesses block all inbound unsolicited traffic on ports 1024 and greater greater than greater than that port. The companys next scheduled patch day is three weeks away, on May 8.”]

Source: https://www.csoonline.com/article/2122148/port-scan-spike-could-indicate-attackers-rsquo–use-of-latest-windows-dns-server-explo.html

Exit mobile version