James Watt
James Watt is an IT consultant and owner at Tech Direct Services. He designs and manages networks for clients across the American Northeast.
RDZFixer — Remote Desktop Services trojan being used to backdoor company networks
Kevin Beaumont
12
I actually think one of my clients got hit with this over the summer. I noticed the port number changed in the registry. It was the final straw that made me say, “There’s no way to know what other back doors they’ve installed.” So we nuked their entire environment.
Most of the utilities they were using were in Russian. Not sure if that’s the actual origin of the hack, but I’m guessing so. IP logs worthless of course because of VPNs/previously hacked companies.