HT TECH wants to start sending you push notifications. Click allow to subscribe

Tool created to aid cleanup from Microsoft hack in broad use

Since the release of the tool, the number of vulnerable systems has fallen by 45 percent or fewer than 10,000 systems — from at least 120,000 at the peak.
By AP
Updated on Mar 22 2021, 03:43 PM IST
Microsoft, the American multinational technology giant, on Tuesday warned that a group of hackers linked to attacks on the Democratic National Committee had exploited a vulnerability in all Windows PCs and that it would not be able to fully mend this for another week. (Reuters)
Microsoft, the American multinational technology giant, on Tuesday warned that a group of hackers linked to attacks on the Democratic National Committee had exploited a vulnerability in all Windows PCs and that it would not be able to fully mend this for another week. (Reuters)

A tool designed to help businesses protect themselves from further compromises after a global hack of Microsoft email server software has been downloaded more than 25,000 times since it was released last week, the White House's National Security Council said Monday.

As a result, the number of vulnerable systems has fallen by 45 percent, according to an NSC spokesperson.

Also read: Looking for a smartphone? To check mobile finder click here.

The one-click Microsoft tool was created to protect against cyberattacks and to scan systems for compromises and fix them. It was developed after a massive hack affecting an estimated tens of thousands of users of servers running Microsoft’s Exchange email program.

Don't miss: Hackers exploiting Microsoft Exchange servers hit 32 indian organisations: Check Point Research

The breach was discovered in early January and was attributed to Chinese cyber spies targeting US policy think tanks. Then in late February, five days before Microsoft Corp. issued a patch on March 2, there was an explosion of infiltrations by other intruders, piggybacking on the initial breach.

The White House earlier this month described the hack as an “active threat” that was being addressed by senior national security officials. The administration's response is being led by deputy national security adviser Anne Neuberger, who convened government officials and private sector experts to brainstorm solutions, particularly given that smaller businesses often lack resources to counter cyber attacks and to clean up after hacks.

Since the release of the tool, the number of vulnerable systems has fallen to fewer than 10,000 from at least 120,000 at the peak.

While Microsoft has taken considerable heat for being the provider of software that elite hackers have exploited, Charles Carmakal, senior vice president and chief technical officer of prominent cybersecurity firm FireEye, said Microsoft, based in Redmond, Washington, deserves credit for working hard to help people who run its software defend themselves.

Read more: Microsoft updates Defender Antivirus to mitigate Exchange server vulnerabilities

He cited, especially, the downloadable turnkey script that people can use to apply patches and see if their systems have been compromised.

“The level of effort that they put into this to help companies defend themselves is terrific," he said. "It’s a tough situation that organizations are in with the vulnerability in general.”

Follow HT Tech for the latest tech news and reviews , also keep up with us on Twitter, Facebook, and Instagram. For our latest videos, subscribe to our YouTube channel.

First Published Date: 22 Mar, 03:43 PM IST
NEXT ARTICLE BEGINS