Java Tech Enthusiast

Apr 28, 2024 · Information Security

Unexpected Lateral Movement via Windows Delivery Optimization Service

A coworker noticed my computer generating large volumes of traffic on port 7680, prompting an investigation that revealed the svchost.exe process running the default Windows Delivery Optimization Service—intended for LAN‑based Windows Update—mimicking lateral‑movement behavior, which I stopped by disabling the feature.