The United team States Computer Emergency Readiness Team (US-CERT) προειδοποιεί με μια ανακοίνωσή της για ένα νέο exploit kit κιτ που αναπτύχθηκε από τη hacking ομάδα Shadow Brokers Το νέο exploit kit είναι διαθέσιμο προς πώληση και στοχεύει συστήματα με Windows.
Earlier this week, rumors were released that wanted Shadow Brokers to try to sell a zero-day Windows for 750 Bitcoin, and US-CERT says it should take action immediately.
In its publication, US-CERT states that the zero-day exploit targets a vulnerability that is available on all Windows systems through the Server Message Block (SMB) feature. A successful one attack allows an attacker to obtain sensitive information from the affected systems.
The team recommends Windows administrators to disable SMB v1 and block all SMB versions on the network limit by blocking the TCP 445 port along with all the relevant protocols on the UDP 137-138 ports and the TCP 139 port, for all devices, even if the above measures could obviously have an impact on the proper functioning of the system.
For the time being, however, it is important to note that there is still no confirmation of this zero-day in Windows, by Microsoft itself that does not seem to know that there is an unpatched vulnerability.