Posts Tagged ‘conficker worm’

Spy Games In Cyberspace

Monday, May 31st, 2010

On November 20, 2008, security analyst Philip Porras discovered what started out as a seemingly trivial worm virus not unlike the many he and his colleagues had caught previously. But what caught the expert’s attention this time was the unprecedented rate at which the new virus multiplied across networks through a vulnerability in Windows, as well the stealthy elegance with which it was designed.

Over the next year and a half, Porras and a crack team of top-level analysts from across the industry dubbed themselves the “Conficker Cabal”, and have relentlessly pursued the containment of the “Conficker” worm virus as well as its dubious origins. As of now, these cyber-sleuths have been engaged in a high tech game of chess with the worm’s creators and remain baffled as to its source, or even its intended purpose. What they do know is that an estimated 6.5 million infected PCs lie in wait to the worm’s command, their owners none the wiser.

The thrilling saga of the Conficker Worm is detailed at length in a new article in The Atlantic, and is astounding not only because it borders on espionage, but also because the virus’ mystery remains unsolved.

Android Phone Now Shipping With Malware Pre-Installed

Monday, March 8th, 2010

pic5-38We’ve reported on new devices shipping with pre-installed malware before, and this time it’s the Android-based HTC Magic phone.

As reported today on Threat Post, a researcher at Panda Security connected the new phone–from European distributor Vodafone–to her PC and was alerted by her anti-virus software that the handset was infected with the Mariposa botnet client malware, which quickly attempted to infect other PCs in the network.

And perhaps even more shocking, this was not the only malware pre-loaded on the phone:

Interestingly enough, the Mariposa bot is not the only malware I found on the Vodafone HTC Magic phone. There’s also a Confiker and a Lineage password stealing malware. I wonder who’s doing QA at Vodafone and HTC these days…

Conficker Infects Critical Medical Devices

Monday, May 4th, 2009

56187580The Conficker worm didn’t just hit PCs — it also infected several hundred critical medical devices, a security expert said in a panel at the RSA security conference. Right now it’s unclear how the devices, which control things like heart monitors and MRI machines, got infected. But it underlines the need to secure medical systems with embedded firewalls and anti-malware software like Mocana’s NanoDefenderâ„¢.

The computers are older machines running Windows NT and Windows 2000 in a local area network that was not supposed to have access to the Internet, however, the network was connected to one that has direct Internet access and so they were infected, he [Marcus Sachs, director of the SANS Internet Storm Center and a former White House cybersecurity official] recently told CNET news.

The situation illustrates the dangers of connecting critical networks, like in hospitals and in SCADA (Supervisory Control and Data Acquisition) systems used by utilities and other critical infrastructure providers, with networks connected to the Internet, he said during the panel “Securing Critical Infrastructures: Infrastructure Exposed.”

“We’re seeing a huge uptick in probing for SCADA systems,” said Jerry Dixon, director of analysis and vice president of government relations at research firm Team Cymru. For years, the SCADA systems were separated from the public networks, but that’s not the case anymore, he said.

While PCs do remain the primary targets, hackers and malware-writers are increasingly setting their sites on non-PC SCADA devices attached to the network. In other words, as PC security mechanisms have become more sophisticated, non-PC SCADA devices are becoming the more attractive, comparatively “soft” targets — an easier way into the host network, thereby threatening our critical national infrastructure.

Download this FREE Whitepaper that dives further into why SCADA devices are under fire and what you can do about it.