A malware researcher published proof-of-concept code that, when put on a USB stick, can trigger the dreaded Blue Screen of Death on various versions of Windows even if the system is locked.
Bitdefender’s Marius Tivadar discovered a vulnerability in the way that Windows handles NTFS file system images. When publishing the proof of concept code on GitHub, he explained, “One can generate blue-screen-of-death using a handcrafted NTFS image. This Denial of Service type of attack can be driven from user mode, limited user account or Administrator. It can even crash the system if it is in locked state.”