Inside the Conficker-Infected Police Body Cameras

Rarely does one story run such a gamut of security threats, encapsulating in this case, Internet of Things risks, supply chain infiltration and some circa-2008 malware for good measure. But that’s what we have with this week’s saga of the body cameras, marketed for police use, that were shipped...

smb-vuln-conficker NSE Script

Detects Microsoft Windows systems infected by the Conficker worm. This check is dangerous and it may crash systems. Based loosely on the Simple Conficker Scanner, found here: -- This check was previously part of smb-check-vulns. Script Arguments smbdomain, smbhash, smbnoguest, smbpassword,...

Conficker Worm in Hiding at an Australian Supermarket Chain

The once-prolific Conficker worm has turned up in the most unlikely of places: Australian discount supermarket, Aldi. The worm was discovered pre-installed on a four-in-one external hard-drive, DVD, USB, and card reader combination device. According to a warning from the Australian Computer...

Conficker Worm Is Still a Threat

Just because there have been no big attacks linked to Conficker since April 2009, it is dangerous to assume that nothing is happening, said the director of the Conficker Working Group, Rodney Joffe. Read the full article. Infosecurity...

Shadowserver Data Reveals Top Conficker Victims

ISPs in Russia and Ukraine are home to some of the highest concentrations of customers whose machines are infected with the Conficker worm, shows data from the Shadowserver Foundation. Read the full article. Washington Post...

2010: A Conficker Worm Odyssey

Researchers expect Conficker to get worse in the coming year in a number of specific ways including the corruption on defensive systems, keylogging, DDoS, mass identity theft, and more. Read the full article. Help Net Security...

Fake Conficker Alert Drops Scareware Threat

An ongoing spam campaign is once again attempting to impersonate Microsoft’s security team by mass mailing Conficker.B Infection Alerts that drop a sample of the Antivirus Pro 2010 scareware scam. Here’s a sample of what the text looks like: “Dear Microsoft Customer, Starting 18/10/2009 the...

Microsoft Issues XP, Vista Anti-Worm Updates

Four months after it modified Windows 7 to stop the Conficker worm from spreading through infected flash drives, Microsoft has ported the changes to older operating systems, including Windows XP and Vista. Read the full story computerworld.com...

Whatever Happened to the Conficker Worm?

From CNN John D. Sutter Remember Conficker? The hugely talked-about computer worm seemed poised to wreak havoc on the world’s machines on April Fool’s Day. And then … nothing much happened. But while the doom and gloom forecast for the massive botnet — a remotely controlled network that security...

Compliance demands prevented repair of virus-infected medical devices

From CNet News Stephanie Condon The Conficker Working Group several months ago discovered several hundred medical devices that had been infected with the Conficker worm and set about alerting the affected hospitals to the problem. The disinfection process should have been straightforward, but the...

Conficker worm hits hospital devices

From Mercury News Elise Ackerman A computer worm that has alarmed security experts around the world has crawled into hundreds of medical devices at dozens of hospitals in the United States and other countries, according to technologists monitoring the threat. Around March 24, researchers monitori...

Conficker's estimated cost? $9.1 billion

From ZDNet Dancho Danchev In a recent blog post, the Cyber Secure Institute claims that based on their previous studies into the average cost of suck malware attacks, the economic loss due to the Conficker worm could be as high as $9.1 billion. Despite that their analysis also considered a much...

1 in 5 Windows PCs still hackable by Conficker

From Computerworld Gregg Keizer Although the media blitz about the Conficker worm prompted a significant number of enterprise users to finally fix a six-month-old Windows bug, about one in five business computers still lack the patch computerworld.com, a security company said today. Scans of more...

Conficker hits University of Utah

University of Utah officials say a computer virus has infected more than 700 campus computers tech.yahoo.com, including those at the school’s three hospitals. University health sciences spokesman Chris Nelson said the outbreak of the Conficker worm, which can slow computers and steal personal...

SRI releases Conficker scanner source code

The experts at SRI International, who have been tracking the Conficker worm as closely as anyone, have released the source code to the scanner they wrote to detect the active P2P scanning that Conficker-infected machines perform. The Conficker worm exhibits a number of interesting characteristics...

Conficker Worm Detection (uncredentialed check)

The remote host seems to be infected by the Conficker worm. This worm has several capabilities which allow an attacker to execute arbitrary code on the remote operating system. The remote host might also be attempting to propagate the worm to third party hosts. C Tenable Network Security, Inc...

FAQ: Conficker and April 1st

Our friends at F-Secure have put together a very valuable FAQ f-secure.com on the Conficker worm to help strip away the hype around the April 1st date. It’s a must read...

Countdown to Conficker's April 1st climax

By Byron Acohido, LastWatchdog.com Two schools of thought exist about what the Conficker worm will do come the wee hours of April 1, 2009, GMT. Some experts, like WinPatrol creator Bill Pytlovany, are sensing that the worm’s controllers will run circles lastwatchdog.com around the Microsoft-led...

Vulnerability in Server Service Could Allow Remote Code Execution (958644)

This host is missing a critical security update according to Microsoft Bulletin MS08-067. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Based...

Server Service Could Allow Remote Code Execution Vulnerability (958644)

This host is missing a critical security update according to Microsoft Bulletin MS08-067. OpenVAS Vulnerability Test $Id: secpodms08-067900055.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Server Service Could Allow Remote Code Execution Vulnerability 958644 Authors: Chandan S Copyright:...