Home Podcasts Videos Guest Posts Q&A My Take Bio Contact
 

Posts Tagged ‘RPC-DCOM’

 

FAQ — The Ominous Downadup/Conficker worm

The creators/controllers of the unnerving Downadup/Conficker worm that continues to spread, mostly via unpatched Windows PCs inside corporate networks, have been very good about  holding their cards close, giving few hints of how they plan to use a botnet of several million infected PCs.  Here’s an FAQ I’ve assembled, derived from interviews with F-Secure’s Patrik Runald, Secureworks’ Don Jackson, Arbor Networks’ Jose Nazario, Sunbelt Software’s Eric  Sites and Panda Security’s Inaki Urzay.

Q. How did  Downadup/Conficker originate?

A. Around last September, as everyone focused on the crashing financial markets, a self-spreading Windows OS infection began hitting  a few PCs in China. The attacker took advantage …more