Lately, it seems like every week, there's news of another group leaking so-called government hacking tools to the public. There's the massive Wikileaks reveal of CIA hacks and their use by hacking groups. And the hits just keep on coming.
A group known as the Shadow Brokers has leaked alleged NSA tools used to attack and break into Windows computers. While the previously unknown tools are said to be extremely potent against earlier Windows versions, experts are saying that even Windows 10 is vulnerable as well.
The leaked tools include malware with codenames like EternalBlue, Oddjob, Esteemaudit, ZippyBeer, and Fuzzbunch. Most of these tools are capable of infiltrating and taking control of any pre-Windows 10 computer. If you think that old Windows computers usage should be dwindling by now, well, think again. Market research shows that older versions of Windows were used by more than 65 percent of desktop users surfing the web last month.
Most of the exploits are said to use zero-day vulnerabilities, previously unknown software exploits that are already being used by hackers even before the software makers are made aware of them.
Security expert Matthew Hickey, co-founder and director of cybersecurity firm Hacker House, is particularly troubled by the leaks and its scope. "In about an hour or so any attacker can download a simple toolkit to hack into Microsoft based computers around the globe," he stated.
On April 14, Microsoft published a blog post stating that after analysis of the leaked tools dumped by the Shadow Brokers, it found that most of the exploits were already patched by security updates issued earlier. To protect against these hacks, Microsoft encourages customers to keep their computers up-to-date with the latest security patches.