Network worm uses weak Windows passwords

Tuesday, 11 March 2003, 11:23 AM EST

Say hello to a network worm which attempts to compromise and spread through Windows machines with weak, default passwords. Called Deloder, the worm also tries to drop a backdoor component.

And yes the worm is spreading through vulnerable machines - albeit modestly, according to Symantec.

The worm spreads by scanning random IP addresses, trying to connect on Port 445. Port 445 (Microsoft SMB over TCP/IP) allows outsiders to access Windows file shares.

This should normally be blocked by a firewall, of course, so home users (or universities with weak security in place) are probably more at risk here.

[ Read more ]

Comment:

For in-depth information on computer viruses, visit the Viruses section of HNS.




Spotlight

Whitepaper: Zero Trust approach to network security

Posted on 20 November 2014.  |  Zero Trust is an alternative security model that addresses the shortcomings of failing perimeter-centric strategies by removing the assumption of trust.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Mon, Nov 24th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //