Hackers exploited a critical vulnerability in Wing FTP Server, a widely used file transfer solution, just one day after the flaw’s disclosure. The vulnerability allows unauthenticated remote code execution, enabling attackers to run code as root or SYSTEM on vulnerable servers. Despite a fix being available for over a month, many users remained unpatched. The attack was unsuccessful due to Microsoft Defender, but attackers attempted to escalate privileges, perform reconnaissance, and create new users to maintain persistence. Researchers recommend immediate upgrading to version 7.4.4.