Shellshock attacks against SMTP servers

Reports are emerging from various sources that many of the SMTP servers has been attacked by the Shellshock bug. Cyber hackers are taking advantage of the Shellshock bug and exploiting the vulnerabilities against certain SMTP servers.The campaign seeks to create an IRC botnet for DDOS attacks and other purposes.

Its going to be a month that Shellshock vulnerability was public and it is also being says that Shellshock is the worst then the Heartbleed vulnerability.  After the public release of the Shellshock bug many of the firms and organisation have patch the vulnerabilities but there are still tonnes of the servers which are vulnerable to the Shellshock bug.

Shellshock bug was located in the Bash shell of the Linux operating system which was resides for 20 years. It was deployed on the configuration which makes the bug severity critical and was also easy to exploit.

Hackers are targetting SMTP server because the mail server are often left untouched (outdated or little concerns) for a long time.