Members
  • Total Members: 12816
  • Latest: t114563
Stats
  • Total Posts: 28524
  • Total Topics: 8240
  • Online Today: 993
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)












Author Topic: Selfish worm targets month-old Windows flaw (Conficker.A)  (Read 1371 times)

0 Members and 1 Guest are viewing this topic.

Samker

  • SCF Administrator
  • *****
  • Posts: 7206
  • KARMA: 291
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum
Selfish worm targets month-old Windows flaw (Conficker.A)
« on: 27. November 2008., 15:22:31 »


More than a month after Microsoft issued an emergency patch for a Windows vulnerability that allows for self-replicating exploits, researchers have spotted a wave of new attacks in the wild that target the critical flaw.

Exploits of MS08-067 have been reported on and off since Microsoft issued the patch in late October, but over the past week, the volume and sophistication of the attacks have grown, according to Ziv Mador, a researcher in Microsoft's Malware Protection Center. His assessment was echoed in reports issued this week by anti-virus providers McAfee and Symantec, the latter which ratcheted up its ThreatCon alert level as a result.

A worm dubbed Conficker.A by Microsoft and Downadup by Symantec is aggressively slithering through corporate networks and home systems alike. It opens up a random port and connects to a server using HTTP. It uses several techniques to obfuscate the attack.

The worm is notable because once it takes hold of a machine it patches the vulnerability to prevent competing attackers from taking hold of the same valuable resource. Infection reports are coming mostly from the US, but other regions, including Western Europe, Japan, China and Brazil, are also affected. Conficker.A avoids infecting PCs based in Ukraine, which is presumably where the attackers are based.

MS08-067 is among the more critical vulnerabilities to hit Windows because on XP versions and earlier a single successful attack can touch off a chain reaction in which other machines on the same network are also compromised. The threat posed by the flaw was so severe Microsoft took the unusual step of issuing an emergency patch outside of its normal update cycle.

It's not surprising that bad guys would target a hole as nasty and gaping as MS08-067. What we still can't fathom is why anyone hasn't yet installed the patch. We're not ones to blame the victim, but anyone attacked by Conficker deserves a generous portion of the responsibility.

(The Register)

Samker's Computer Forum - SCforum.info

Selfish worm targets month-old Windows flaw (Conficker.A)
« on: 27. November 2008., 15:22:31 »




 

With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Verification:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising