I’ve been building a small list of eternal blue vulnerable PCs with masscan & nmap in the past two weeks. most of the PCs i’ve come across are office or small business computers that have nothing really interesting in them. They are assigned to one task like running printing software or other specialized software like accounting software, scientific monitoring tools or scada stuff.

The owners of these PCs likely have no clue what is eternal blue nor what ports are open in thier network. I thought of closing their ports or setting up firewalls but i have no right to do so, because maybe that’d break their network setup or devices functionality.

So what i’ve been doing is dropping a text file on their desktop & their main drives, it contains a link of eternal blue wikipedia, youtube video on the topic & warning them that their network is vulnerable & how they can fix it. & to make sure that they see the file i made batch script to open the text file on startup. But i’m still not sure if this is the right thing to do. don’t know if im helping or making them freak out.