Malware Exploding, Especially On Mobile Devices !

Mobile malware is growing, and Adobe is the main vector of attack, according to new figures from security firm McAfee, which were published on Tuesday. Cybercriminals are adopting strategies to benefit from a more mobile device users in the report, McAfee Threat Report: Fourth Quarter 2010...

Conficker Working Group: Efforts To Fight Botnet A Mixed Bag

A new report from the Conficker Working Group concludes that coordinated efforts to stomp out the botnet were a mixed bag: helping to thwart the worm’s efforts to register Web domains that it used to spread, but failing to remove the worm from infected Windows computers. The report released this...

Nmap NSE: P2P Conficker

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

New Malware Murofet Following Conficker's Lead

It’s been a blissful few months since Conficker last reared its over-hyped head, but now there’s a new piece of malware that is adopting some of the tactics that Conficker used. The malware, known as Murofet, is using Conficker’s technique of generating thousands of new domains for updates every...

Nmap NSE: SMB Check Vulnerabilities

This script attempts to check the following vulnerabilities: - MS08-067, a Windows RPC vulnerability - Conficker, an infection by the Conficker worm - Unnamed regsvc DoS - SMBv2 exploit CVE-2009-3103 This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-check-vulns.nse. OpenVAS...

Conficker Worm Is Still a Threat

Just because there have been no big attacks linked to Conficker since April 2009, it is dangerous to assume that nothing is happening, said the director of the Conficker Working Group, Rodney Joffe. Read the full article. Infosecurity...

DHS Studying Global Response to Conficker Botnet

One year after the Conficker botnet was front-page news around the world, the U.S. Department of Homeland Security is preparing a report looking at the worldwide effort to keep it in check. The report, to be published within the month, shows how an ad hoc group of security researchers and Interne...

Behind the Scenes of the Botnet Epidemic

2009 saw many, many new botnet outbreaks and advancements in their criminal management. Throughout the year Damballa tracked thousands of distinct criminal operated botnets and identified millions of newly compromised enterprise systems each day. This week I’m going to share some of our findings...

Conficker Infections Drop With New Year

People have one more reason to celebrate the new year, according to the Shadowserver Foundation: Nearly a million Conficker-infected computers have oddly disappeared overnight. Read the full article. Security Focus...

Shadowserver Data Reveals Top Conficker Victims

ISPs in Russia and Ukraine are home to some of the highest concentrations of customers whose machines are infected with the Conficker worm, shows data from the Shadowserver Foundation. Read the full article. Washington Post...

On the Hunt for Conficker

There are several ongoing investigations attempting to find the authors of the Conficker botnet, one of the fastest spreading worms in history, but those responsible for the worm have proven elusive. Read the full article. TechTarget...

2010: A Conficker Worm Odyssey

Researchers expect Conficker to get worse in the coming year in a number of specific ways including the corruption on defensive systems, keylogging, DDoS, mass identity theft, and more. Read the full article. Help Net Security...

The Debate Over Naming Botnets

The security industry lacks a uniform way to title botnets, and the result is sometimes a long list of names for the same botnet that are used by different antivirus vendors and that can be confusing to customers. As it stands now, the infamous Conficker is also known as Downup, Downadup and Kido...

Conficker Infects 7 Million Systems in a Year

The Shadowserver Foundation reported that it has discovered 7 million unique IP addresses infected by Conficker and its variants. Tracking of the attack was accomplished by cracking the algorithm that the worm uses to find instructions on the Internet. Shadowserver then used sinkhole servers to l...

Microsoft Malware Data Shows Trojans Rampant in USA

One week after the release of its Microsoft Security Essentials utility, Microsoft is sharing some very useful data on malware infections globally. In the first week alone, the tool counted four million detections on 535,752 distinct machines, with ID-theft related Trojans sitting atop the detect...

Fake Conficker Alert Drops Scareware Threat

An ongoing spam campaign is once again attempting to impersonate Microsoft’s security team by mass mailing Conficker.B Infection Alerts that drop a sample of the Antivirus Pro 2010 scareware scam. Here’s a sample of what the text looks like: “Dear Microsoft Customer, Starting 18/10/2009 the...

From Gimmiv to Conficker: MS08-067 Under The Microscope

GENEVA — The critical MS08-067 vulnerability used by the Conficker worm to build a powerful botnet continues to be a lucrative security hole for cybercriminals. During a presentation at the Virus Bulletin 2009 conference here, a trio of Microsoft researchers dissected the malware attacks linked t...

Microsoft Issues XP, Vista Anti-Worm Updates

Four months after it modified Windows 7 to stop the Conficker worm from spreading through infected flash drives, Microsoft has ported the changes to older operating systems, including Windows XP and Vista. Read the full story computerworld.com...

Whatever Happened to the Conficker Worm?

From CNN John D. Sutter Remember Conficker? The hugely talked-about computer worm seemed poised to wreak havoc on the world’s machines on April Fool’s Day. And then … nothing much happened. But while the doom and gloom forecast for the massive botnet — a remotely controlled network that security...

Examining Conficker: When a worm becomes a botnet

From TechTarget Brian Sears I recently read an article where two experts expressed different ideas of what Conficker represented. One expert argued that Conficker was clearly not a botnet, as it lacked some of the basic abilities typically found in botnets. While the other expert said Conficker...