Cyber criminals are using leaked Microsoft hacking exploit EternalBlue to distribute malware including Backdoor.Nitol and the trojan Gh0st RAT, according to security firm FireEye. EternalBlue was used in the recent WannaCry ransomware attack. Both malware exploit vulnerabilities in the NSA server message block protocol, and NSA Windows users were urged to ensure that their software was up to date. "In the coming weeks and months, we expect to see more attackers leveraging these vulnerabilities to spread such infections with different payloads," said a spokesperson for FireEye. The malware has already been used to attack the aerospace and defence industry and government agencies.
Cyber criminals are using leaked NSA hacking exploit EternalBlue to distribute malware including Backdoor.Nitol and the trojan Gh0st RAT, according to security firm FireEye. EternalBlue was used in the recent WannaCry ransomware attack. Both malware exploit vulnerabilities in the Microsoft server message block protocol, and Microsoft Windows users were urged to ensure that their software was up to date. "In the coming weeks and months, we expect to see more attackers leveraging these vulnerabilities to spread such infections with different payloads," said a spokesperson for FireEye. The malware has already been used to attack the aerospace and defence industry and government agencies.