Another Conficker Update
It seems that the Conficker worm has updated once more. This time in vain of stealth as opposed to propagation. As was recently informed unto you, the last variation of Conficker would generate 250 pseudo-random domain names to which it would attempt to query all 250 of those domains once every two hours looking for updates from its command and control mothership. This has changed. The worm will now generate 50,000 domain names a day!!! Though, it will only attempt to contact 500 of those 50,000, and that is done only once per day.
The interesting part of this worm remains that even with three (and a half) different variations, Conficker has yet to do anything more than mutate and propagate. I'm guessing that when it does strike, it will be a busy day for the press, considering it hasn't done much of anything so far, and its buzz rivals, if not surpasses the working boys like Rustock, Pushdo, and Waledac.

0 comments:
Post a Comment