Morto is computer worm that spreads via the Windows Remote Desktop Protocol (RDP) and infects Microsoft Windows workstations and servers. Morto first appeared in August 2011, when network administrators started noticing heavy spikes in traffic on Port 3389/TCP.
Once Morto infects one computer on a network, the worm scans for other machines that have RDP enabled and copies itself to these computers’ local drives as a DLL file, which then creates additional files on the computers.The Morto worm can also be controlled remotely. At least two variants of the Morto worm are currently known to security experts.
