Conficker virus report by CBS 60 minutes

[foshizzle]

At the end of the report, even CBS' network was infected by the worm! I'm so glad I use a Mac (and not internet explorer, especially!).

http://www.cbsnews.com/stories/2009/03/27/60minutes/main4897053.shtml

Microsoft has a $250,000 bounty up for the hackers responsible for it.

http://www.cnn.com/2009/TECH/ptech/02/13/virus.downadup/index.html

http://www.cnn.com/2009/TECH/03/24/conficker.computer.worm/

Even us Mac users, anyone surfing the 'net can never be too careful. I use openDNS on my home network and they are currently blocking any of the sites generated by the worm to infect (http://blog.opendns.com/2009/02/09/stats-are-back-and-conficker/). Anyone with Windows, be warned. Keep that virus protection updated and be careful what you click on.

Look out on April 1 if you do have it, supposedly the virus is scheduled the 'phone home' for instructions on what to do next.

[Consultant]

Already had to nuke a vista pc last week.

Antivirus shut down. Nothing worked. At least it was the gaming pc.

[savar]

I'm glad they are covering these topics... but the coverage is very weird and -- as a security professional -- I find it very misleading.

For some reason, the report mentioned fascist and nazi symbols. What does that have to do with anything? That was the moment where I realized that the "journalism" was bordering on fear mongering.

Also, why didn't they interview any independent experts? Symantec got a giant, free advertisement and nobody else with an informed opinion was allowed to speak.

It was really below par compared to the 60 Minutes' usual coverage.

[P-Worm]

This is scary stuff. I guess all there is left to do is wait and see what happens on April 1.

P-Worm

[KingYaba]

April 1st? I have to ask. Are we gettin' fooled?

[NT1440]

I have a feeling it will be a problem, but as is the norm in the tech journalism industry, the story will be amazingly overhyped and fear mongering will be everywhere.

This will be one time that I think Apple will have gone too far if they happen to make an ad over this specific threat.

[iJohnHenry]

April 1st? I have to ask. Are we gettin' fooled?

24/7 baby, 24/7. ;)

[NT1440]

April 1st? I have to ask. Are we gettin' fooled?

Something tells me that the date it was set to activate was no mere coincidence.

[localoid]

I, for one, want to welcome our new robotic overlords...

[yossim]

I, for one, want to welcome our new robotic overlords...

What!?

[bobbleheadbob]

So does anybody know whether or not this virus could effect Macs? Or is it Windows only?

[foshizzle]

I'm glad they are covering these topics... but the coverage is very weird and -- as a security professional -- I find it very misleading.

For some reason, the report mentioned fascist and nazi symbols. What does that have to do with anything? That was the moment where I realized that the "journalism" was bordering on fear mongering.

Also, why didn't they interview any independent experts? Symantec got a giant, free advertisement and nobody else with an informed opinion was allowed to speak.

It was really below par compared to the 60 Minutes' usual coverage.


I agree - sounded a lot like scaring people into buying symantic.

And not to get into a mac vs. PC thing here, but I think it would have been responsible for them to say this was a major issue with windows, not effecting the mac platform. But even larger an issue is using internet explorer. For Google's part of the interview they used Chrome. The interviewer should have stated that the browser can be the first line of defense against this stuff and only using a safe, secure one with alerts turned on is a best practice.

[sleepdeprived]

I, for one, want to welcome our new robotic overlords...

LOL!
Ok, that made me almost choke on my cereal.
:)

[Schtumple]

Really? the majority are Russians? Honestly? Someone has a grudge...

If you're a moron, you'll get infected, simple as that, it's pretty easy to spot malware...

[localoid]

http://farm1.static.flickr.com/56/113996138_0f022a5ce2.jpg?v=0

[Schtumple]

http://farm1.static.flickr.com/56/113996138_0f022a5ce2.jpg?v=0

I love that it says "the worlds only reliable newspaper" :p

[velocityg4]

I love that it says "the worlds only reliable newspaper" :p
I for one want those bar glasses.:rolleyes:

[Mr. lax]

I for one want those bar glasses.:rolleyes:

HAHA, i'm glad someone else caught that

[foshizzle]

http://www.msnbc.msn.com/id/30179873/

Conficker hits University of Utah network.

Looks like even the big guys can be hit, nobody is immune. Except us apple users.

[Schtumple]

http://www.msnbc.msn.com/id/30179873/

Conficker hits University of Utah network.

Looks like even the big guys can be hit, nobody is immune. Except us apple users.

And Linux users, basically ANY operating system that doesn't run Windows...

[localoid]

...
Looks like even the big guys can be hit, nobody is immune. Except us apple users.

Any Windows system that has been updated with the patch issued 'way back in October of 2008 is also immune. Conficker spreads via unpatched Windows machines, apparently owned by people who don't understand why they need to install Windows updates on a regular basis.

[foshizzle]

Any Windows system that has been updated with the patch issued 'way back in October of 2008 is also immune. Conficker spreads via unpatched Windows machines, apparently owned by people who don't understand why they need to install Windows updates on a regular basis.

what about those patches that royally screw up computers? This is why IT companies have to hold them before pushing them out to the computers on their own large networks. Every-day People not on a large network get annoyed with the ever-present yellow shield at the bottom of their screen and popups every minute asking for an update. They turn it off because it is annoying, just like anti-virus software is turned off or put on hold because it uses so many resources.

I have a hard time believing that the computers at a corporation such as CBS and a university such as U of Utah would have any computers that were not patched, updated and scanned. This thing is getting past everything people throw at it.

[smokeandroar]

how about older safari using something like CAMINO (mozilla) to keep up with ebay, am I vulnerable??

[localoid]

...
I have a hard time believing that the computers at a corporation such as CBS and a university such as U of Utah would have any computers that were not patched, updated and scanned. This thing is getting past everything people throw at it.

I'd suggest you should do a little research on the subject.

Here's a very simple to understand starting place (http://www.symantec.com/norton/theme.jsp?themeid=conficker_worm), which is the source of the following information on Conficker (also known as Downup):


How does the worm infect a computer?

The Downadup worm tries to take advantage of a problem with Windows (a vulnerability) called MS08-067 (http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx) to quietly install itself. Users who automatically receive updates from Microsoft are already protected from this.


Who is at risk?

Users whose computers are not configured to receive patches and updates from Microsoft and who are not running an up to date antivirus product are most at risk. Users who do not have a genuine version of Windows from Microsoft are most at risk since pirated system usually cannot get Microsoft updates and patches.