Viruses/Worms News

Conficker variant goes on defense against Microsoft alliance

Monday, March 9, 2009

A new version of the Conficker worm has been released in what some security experts are saying are the first set of orders being sent to already-infected machines in an effort to protecting them from an alliance that consists of Microsoft and a multitude of security organizations.

The variant is being called Conficker.c and is increasing the number of domains it uses to communicate with its cybercriminal owners from 250 to 50,000 a day.

The significant increase may be in direct response to a recent effort by Microsoft and other firms to shore up domains the worm was targeting. The move may also be a way for the cybercriminals to protect their infect machines, and possibly themselves, since Microsoft announced a $250,000 award for any information leading to the capture of the person or persons responsible for the worm.

One security expert told ComputerWorld.com the increase will make it harder to combat against the worm, though the silver lining in the situation was that the number of computers infected with the worm has been decreasing.

Conficker, also known as Downadup, initially took advantage of PCs that did not have a Microsoft security patch installed as well as transferring by removable devices.