Chinese firewall and IPS vendor Hangzhou DPTech Technologies, according to Microsoft, was the culprit behind a rapid-fire turnaround of a working exploit for the Windows Remote Desktop (RDP) flaw in mid-March, just after the bug was patched by Microsoft. Microsoft said that Patch Tuesday had warned of possible attacks emerging quickly for the "critical" vulnerability because an attacker would be able to reverse-engineer its new patch for the RDP bug in relatively short order. That raised the potential for exploits to be written for a targeted attack or for automatic-propagation worms that would let attacks quickly take over systems within corporate networks for botnets. RDP is a tool used by IT departments to handle help desk issues and by administrators to manage virtualized machines.