https://www.channelfutures.com/wp-content/themes/channelfutures_child/assets/images/logo/footer-new-logo.png
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • Complete 2023 MSP 501 Rankings
    • 2023 MSP 501 50-1
    • 2023 MSP 501 100-51
    • 2023 MSP 501 150-101
    • 2023 MSP 501 200-151
    • 2023 MSP 501 250-201
    • 2023 MSP 501 300-251
    • 2023 MSP 501 350-301
    • 2023 MSP 501 400-351
    • 2023 MSP 501 450-401
    • 2023 MSP 501 501-451
    • NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Channel Futures 20: Top Tech Providers
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2023 Editorial Calendar
  • Awards
    • Back
    • 2023 MSP 501
    • 2023 NextGen 101
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Technology Advisor 101 (TA 101)
    • Channel Leaders Lists
  • Events
    • Back
    • 2024 CP Expo Call for Speakers
    • Channel Futures Leadership Summit
    • MSP Summit
    • CP Conference & Expo
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
Channel Futures
  • NEWSLETTER
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • Complete 2023 MSP 501 Rankings
    • 2023 MSP 501 50-1
    • 2023 MSP 501 100-51
    • 2023 MSP 501 150-101
    • 2023 MSP 501 200-151
    • 2023 MSP 501 250-201
    • 2023 MSP 501 300-251
    • 2023 MSP 501 350-301
    • 2023 MSP 501 400-351
    • 2023 MSP 501 450-401
    • 2023 MSP 501 501-451
    • NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Channel Futures 20: Top Tech Providers
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2023 Editorial Calendar
  • Awards
    • Back
    • 2023 MSP 501
    • 2023 NextGen 101
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Technology Advisor 101 (TA 101)
    • Channel Leaders Lists
  • Events
    • Back
    • 2024 CP Expo Call for Speakers
    • Channel Futures Leadership Summit
    • MSP Summit
    • CP Conference & Expo
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
    • Newsletter
  • REGISTER
  • MSPs
  • VARs / SIs
  • Agents
  • Cloud Service Providers
  • Channel Partners Events
 Channel Futures

Security


Shutterstock

Security Vulnerability

Microsoft Software Vulnerabilities Prevalent on Underground Criminal Forums

  • Written by Edward Gately
  • July 21, 2021
Cybercriminals sell software vulnerabilities to one another.

Microsoft software vulnerabilities are a hot commodity on underground criminal forums. Cybercriminals buy the vulnerabilities to launch attacks.

That’s according to recent Atlas VPN team findings. Cybercriminals sell software vulnerabilities they’ve discovered to one another, increasing their profit and causing more damage along the way.

More than half (51%) of exploits sold on underground cybercriminal forums are for Microsoft products. The increasing number of published Microsoft software vulnerabilities could intensify the impact of cyber crimes, according to Atlas VPN.

William Sword is a cybersecurity writer and researcher at Atlas VPN.

“Exploits for Microsoft products are popular because they have a large user base,” he said. “Most people have Windows operating systems installed on their computers, or they use Microsoft Word and Excel. The more people cybercriminals can affect, the better it is for them.”

Organizations should make sure the devices and software they use are updated to the newest version, Sword said.

“Once the vulnerabilities become public, companies like Microsoft patch them up, but it is essential to download the update for the vulnerability to become insufficient,” he said. “In addition, setting up antivirus software and firewall on your devices and network can help protect against exploits in case some vulnerability was overlooked. Also, it is crucial to educate your employees on security risks. Simulate phishing emails so next time a real phishing email comes, your workers are better prepared. If nobody falls for it, the cyberattack will never trigger.”

Numerous Microsoft Products

Microsoft Office exploits made up 23% of all vulnerabilities sold on underground forums. Malicious Excel or Word files are sent out via phishing emails. And once the victim opens them, the files trigger malware that can steal login credentials, and drop ransomware or cryptocurrency miners.

Microsoft Windows exploits accounted for 12% of vulnerabilities sold on hacker forums. By purchasing these exploits, attackers can gain access to administrative rights of your network or computer.

Microsoft Remote Desktop Protocol (RDP) exploits counted for 10% of all sales. Unauthorized attackers can use your computer as though they were sitting in front of it.

Internet Explorer (IE) and Microsoft SharePoint each made up 3% of the vulnerabilities sold.

Vulnerabilities Adding Up

As cyberattack volume began increasing, many hackers began searching for new undetected vulnerabilities they could exploit.

The number of published software vulnerabilities in 2015 and 2016 were close to 6,500, according to Atlas VPN. That jumped to 14,644 in 2017, and reached a record-breaking 18,395 last year.

One of the most dangerous exploits in 2017 was CVE-2017-0144, which affected the Windows operating system. Hackers used the vulnerability to deliver WannaCry and Petya/NotPetya ransomware. It resulted in one of the most damaging ransomware outbreaks to date.

In March 2020, another concerning vulnerability was published, CVE-2020-0796. Cybercriminals could abuse this exploit in several ways, such as launching a network-based attack, sending malware, or gaining privileges to the target’s system.

Want to contact the author directly about this story? Have ideas for a follow-up article? Email Edward Gately or connect with him on LinkedIn.
Tags: MSPs VARs/SIs Strategy Channel Research Cloud Desktop Security

Most Recent


  • John DeLozier, ConvergeOne, people on the move
    Channel People on the Move: HP, 8x8, Five9, Nitel, RapidScale, More
    New hires and promotions featured here also include Bridgepointe, C1, Telarus, Kore and many more.
  • Jake SChuman Shane McNamara Avant SPecial Forces
    Avant Rolls Out Vendor Analytics, Names Top Supplier NPS Scores
    Avant is providing NPS scores for its vendors based on a growing pool of reviews from its technology advisor partners.
  • 2023 Kaseya DattoCon logo
    Kaseya Intros AI Bots, Credit for Unused Appliances, Passive Recurring Revenue
    Kaseya CEO Fred Voccola kicks off DattoCon with partner updates, new products and a litter of AI bots
  • Boomi GPT debuts
    Boomi GPT First Offering in Company's New AI Suite
    Boomi announced its AI suite this past summer.

Leave a comment Cancel reply

-or-

Log in with your Channel Futures account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • ransomware
    Fighting the Ransomware Crisis with Better Data
  • Threats
    Tokyo Olympics Contending with Cyber Threats, FBI Warns of More Coming
  • Fiber Optics
    Lumen Expands Fiber Network in Europe
  • security
    Sophos Gains NDR with Braintrace Acquisition, Microsoft Buys CloudKnox

Upcoming Events

View all

Channel Futures Leadership Summit

October 30, 2023 - November 2, 2023

Channel Partners Conference & Expo

March 11, 2024 - March 14, 2024

Channel Futures Leadership Summit 2024

September 17, 2024 - September 19, 2024

Galleries

View all

Channel People on the Move: HP, 8×8, Five9, Nitel, RapidScale, More

October 3, 2023

7 Trends Impacting Ingram Micro Partners: Marriage of AI, Data Looms Large

October 2, 2023

Nutanix Partner Program Sees More Changes, Vendor Touts ‘Channel-Led’

October 2, 2023

Industry Perspectives

View all

Partners Balance Multicloud Opportunity, Complexity

September 25, 2023

Why Conversational AI Matters for Your Customers and How It Can Boost Your Revenue

September 15, 2023

The 5 Ds that Lead to Unplanned Business Sales

September 13, 2023

Webinars

View all

MSP 501: Leadership in Cybersecurity

October 19, 2023

DE&I: Find the Balance that Works for You

September 7, 2023

Above and Beyond with the NextGen 101ers

August 30, 2023

White Papers

View all

6 UCaaS Reseller Challenges and How Real World Businesses Solved Them

February 1, 2023

Frost Radar: North American UCaaS Market, 2022

February 1, 2023

The Complete Guide to White-Label UCaaS for Reseller Success

February 1, 2023

Channel Futures TV

View all

Coffee with Craig and James Episode 129: ZLH Enterprises

Coffee with Craig and James Episode 128: Channel Partner Strategies Intelligence Service

August 25, 2023

Coffee with Craig and James Episode 127: Expereo, Movie Night Returns

August 18, 2023

Coffee with Craig and James Episode 126: ARG

July 28, 2023

MSP 501

The industry's largest and most comprehensive partner awards program.

Newsletters and Updates

Sign up for The Channel Report, Channel Futures Update, MSP 501 Newsletter and more.

Live Channel Events

Get the latest information on the next industry-leading Channel Partners event.

Galleries

Educational slide shows and images from live events.

Media Kit And Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • Channel Partners Events
  • Telecoms.com
  • MSP 501
  • Black Hat
  • IoT World Today
  • Omdia

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Newsletter

FOLLOW Channel Futures ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X