“Usernames and passwords on some systems may have been exposed for months or years by the vulnerability, which has been part of every OpenSSL release since March 2012. There are signs that exploits for the vulnerability were in use by someone for some time before the vulnerability was revealed.  Terrence Koeman of MediaMonks told Ars he found signs of attempts dating back to November 2013. He used the packet content of a successful exploit of the Heartbleed vulnerability to check inbound packets logged by his servers and found a number of incoming packets from a network suspected of harboring a number of ‘bot’ servers that were apparently scans for the vulnerability.”

http://arstechnica.com/security/2014/04/heartbleed-vulnerability-may-have-been-exploited-months-before-patch/

Did you like this?
Tip Freedomwat.ch Staff with Bitcoin

Donate via Installed Wallet Copy