Eugene Kaspersky: Conficker could have been much worse

From CNet News Liam Tung Cybercrime fighter Eugene Kaspersky can’t help but be impressed by the slick operations behind the Conficker botnet, and says that it could have been worse had the botnet been after more than just money. “They are high-end engineers who write code in a good way,” Kaspersk...

Compliance demands prevented repair of virus-infected medical devices

From CNet News Stephanie Condon The Conficker Working Group several months ago discovered several hundred medical devices that had been infected with the Conficker worm and set about alerting the affected hospitals to the problem. The disinfection process should have been straightforward, but the...

Conficker worm hits hospital devices

From Mercury News Elise Ackerman A computer worm that has alarmed security experts around the world has crawled into hundreds of medical devices at dozens of hospitals in the United States and other countries, according to technologists monitoring the threat. Around March 24, researchers monitori...

Conficker's estimated cost? $9.1 billion

From ZDNet Dancho Danchev In a recent blog post, the Cyber Secure Institute claims that based on their previous studies into the average cost of suck malware attacks, the economic loss due to the Conficker worm could be as high as $9.1 billion. Despite that their analysis also considered a much...

Critical infrastructure security still lagging

The interdependencies and interconnections of the networks that run the country’s critical infrastructure assets such as water, power and gas have created a dangerously fragile system in which security is just now becoming a priority, experts say. For years the priorities for these networks have...

Conficker P2P Service Detection

Binary data confickerp2pdetect.nbin...

Conficker Detection

This host seems to be contaminated with infectious Conficker Worm. Based on the work of Tim Brown as published here, http://www.nth-dimension.org.uk/blog.php?id=72 along with the associated NASL from SecPod Updated SRVSVC and ntrPathCanonicalize Request Packets with Description. - By Chandan S...

Conficker Detection

This host seems to be contaminated with infectious Conficker Worm. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Conficker botnet not nearly as large as feared

An analysis of the Conficker peer-to-peer network set up by the latest variant of the worm shows that the size of the network is far smaller than originally thought. Estimates of the size of the botnet have run far into the millions, but analysts at Kaspersky Lab have been observing the network a...

1 in 5 Windows PCs still hackable by Conficker

From Computerworld Gregg Keizer Although the media blitz about the Conficker worm prompted a significant number of enterprise users to finally fix a six-month-old Windows bug, about one in five business computers still lack the patch computerworld.com, a security company said today. Scans of more...

Conficker hits University of Utah

University of Utah officials say a computer virus has infected more than 700 campus computers tech.yahoo.com, including those at the school’s three hospitals. University health sciences spokesman Chris Nelson said the outbreak of the Conficker worm, which can slow computers and steal personal...

Conficker virus and the 'scareware' link

Ryan Naraine on KGO AM 810 Newstalk Radio – April 10, 2009 Ed and Jen from San Francisco’s KGO talk radio talk again with Threatpost editor Ryan Naraine. It looks like Conficker is stirring to life after doing absolutely nothing on April 1 and Ryan says it’s linked to “scareware programs” that po...

Conficker business model: Scareware and spam

The Conficker botnet has started to use its peer-to-peer communication system to update itself and download scareware fake anti-virus programs to millions of infected Windows machines, according to malware hunters tracking the threat. The latest Conficker mutant comes a week after a heavily-hyped...

Conficker-infected PCs get update, better anti-security defenses

From Network World Jeremy Kirk Millions of PCs infected with the Conficker virus have received a series of updated files over peer-to-peer connections that improve the worm’s defenses against security products and also include a sniffer and some fake anti-virus software. This is just the latest...

SRI releases Conficker scanner source code

The experts at SRI International, who have been tracking the Conficker worm as closely as anyone, have released the source code to the scanner they wrote to detect the active P2P scanning that Conficker-infected machines perform. The Conficker worm exhibits a number of interesting characteristics...

Rich Mogull on the Conficker Response and DLP Adoption

Dennis Fisher talks with Rich Mogull, founder of Securosis, about the behind-the-scenes effort by the Honeynet Project and others to identify Conficker-infected PCs, as well as the hype surrounding the DLP market and the level of DLP adoption. Subscribe to the Digital Underground podcast on Podca...

Conficker copycat: Old worm using new tactics

From Computerworld Gregg Keizer An old, but little-known worm has copied some of the infection strategies of Conficker computerworld.com, the worm that raised a ruckus last week, Microsoft security researchers said late Friday. Neeris, which harks to May 2005, is now exploiting the same Windows b...

Inside the Conficker Working Group

From the Internet Storm Center The mere existence of the Conficker Working Group also known as the Conficker Cabal is something of a minor miracle. Security vendors do not have a long history of cooperating with each other, aside from the perhaps the antivirus companies sharing samples. But, as a...

Criminals surfing the Conficker hype

By Georg Wicherski As already reported by F-Secure, criminals are using the Conficker hype to push rogue anti-virus software to computer users. Their solution will sometimes display false alerts on clean systems and try to lure their victims into buying a fake cleaning program for $39.95 from the...

How to identify and clean Conficker infections

As the world prepares for the complete destruction of the Internet tomorrow when the Conficker worm makes a small change in its communication protocol, a voice of reason has emerged from the wilderness. The Honeynet Project on Monday released a paper with a detailed analysis of the worm as well a...