⬇ Download holy card: ·
The Demon Sasser, Who Came Uninvited
Legend
Between April and May 2004 a worm exploited a buffer overflow in the Windows LSASS service and spread by itself, without anyone having to click anything. It crashed and rebooted machines around the world, halting airline desks, hospitals and news agencies. Its author was a German teenager, who had also written Netsky variants and was convicted in 2005.
Exorcism
Cast it out by patching early (MS04-011). Block the SMB and LSASS ports, TCP 445 and 139, from every untrusted network, and keep the host firewall on: a worm that never asks permission must be stopped before the door.