As expected, Conficker stays quiet

Apr 2, 2009 3:37 PM
Tags: major | update | attack

The much-hyped Conficker botnet has passed its April 1st update mark without causing any major incident.

Researchers said on Wednesday that though the infected machines did appear to attempting contact with an update server, no other activity stemming from the infections had been reported.

"We had several readers contact us over the past 24 hours with some minor impact but so far no reports of anything newsworthy," Sans researcher Marcus Sachs said in a blog posting Wednesday morning.

"Many organisations have been proactive about scanning their systems and finding either unpatched or Conficker-infected computers that were subsequently removed for repair."

The day provides a rather anti-climactic end to what some had predicted would be a major computing crisis.

When news emerged that machines infected with the Conficker.C worm would be connecting to a control server on April 1, many speculated on a possible attack.

That speculation picked up further steam when large news outlets picked up the story and some pundits predicted that the update could trigger a catastrophic series of attacks.

Those charged with researching and analysing the worm, however, suggested that the update would likely be a non-event.

Experts noted that the criminals who owned and operated the botnot would not want to risk losing the valuable network by triggering a major attack.

"Setting an attack to happen in the future and leaving the specifics of that attack in plain sight mostly serves to give everyone a chance to prepare for t he attack and defend against it," noted 451 Group analyst Paul Roberts.

"It’s kind of like those hopelessly complex executions in the James Bond films. Why tie the guy to the table then wait for 30 mintues for the laster to cut him up? If you want Bond dead, just shoot him in the head execution style and be done with it?"

Copyright ©v3.co.uk


  • Email a Friend
  • Print Page
As expected, Conficker stays quiet
 
Comments

Be the first to comment on this article.
Thoughts on this article? Add a comment below.
Comment:
Want to participate in the discussion?
Or log in now to comment
 
 
 
Top Stories
Oracle shuts down open source test servers
Playing nice with the open source community, Larry?
 
Google hosts election debate
Lundy, Fletcher and Ludlam face off on tech policies.
 
Telstra fined $18.5m for exchange access
Kept competitive DSLAM kit out.
 

Latest VideosSee all videos »

Latest Comments
"anyone who knows ANYTHING about RF knows how idiotic it is to have a "bare" antennae that will ..."
by Res Jul 31, 2010 10:00 AM
 
"Now Julia, if only you would promise not to filter the internet in your next term of government ..."
by hsvandrew Jul 31, 2010 9:33 AM
 
"@Nate - my fears are that if we use a national consortium as an interface to international ..."
by heavenlyhaloes Jul 31, 2010 12:41 AM
 
"Did anybody notice that on Apple's website the iPhone is missing the AT&T logo on the top bar? ..."
by brownenicola Jul 30, 2010 10:18 PM
 
"@digger11 - when will you learn just to remain quiet when you don't have all the facts or a ..."
by Bazwalt Jul 30, 2010 7:13 PM
Polls
Did Google breach the Telecommunications Interception or Privacy Acts during its WiFi wardrive?

   |   View results
Yes. There is no excuse for collecting this data.
  28%
 
No. If your wireless network is unsecured, you have no right to complain
  72%
TOTAL VOTES: 1873

Vote