Cyber Risks · Krebs on Security

Service Sells Access to Fortune 500 Firms

Summary: A cybercrime service called Dedicatexpress.com was renting access to nearly 17,000 hacked computers worldwide, with almost 300,000 compromised systems having passed through it since early 2010, selling access to machines running Microsoft's Remote Desktop Protocol. Krebs found a Windows Server 2003 machine in Cisco Systems' San Jose address space on sale for $4.55 with the credentials "Cisco" and "Cisco", which a Cisco security contact confirmed was a "bad lab machine" inside its network.

Key Takeaway: Access to a Fortune 500 network cost $4.55, and the service let buyers search hacked RDP servers by IP address range, so any organization with weak RDP credentials is findable by its own address block.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related