Information Technology News

Conflicker Worm - More Potent MS08-067 attacks to unpatched systems

MS08-067 worm developments have continued by malicious authors, since Microsoft made this security patch available on October 23, 2008. The latest development ramps up the danger, as this new worm willdelete system restore points, creates a backdoor to download more malicious code, and it even patches the RPC vulnerability to further disquise it's presence.

While AV protection and firewalls can mitigate attacks to port 445, the best defense is to ensure all PCs are up-to-date for Microsoft security changes. For example, an unpatched PC might become infected if their firewall fails or isn't active when connected to the Internet. If this worm were present on a laptop, it could infect unpatched corporate web servers and PCs if Intranet firewall controls are missing.

This new worm represents the most advanced MS08-067 attacks to date. As noted in every link, it's important to PATCH NOW if you have any systems that don't have this update.

New malware using an ms08-067 exploit gained momentum
http://blogs.technet.com/mmpc/archiv...-exploits.aspx
http://www.avertlabs.com/research/bl...ther-067-woes/
http://blog.trendmicro.com/ms08-067-...nets-reloaded/
http://isc.sans.org/diary.html?storyid=5401

Call Richards Consulting, Inc. at (650) 291-4986 for assistance to ensure that your systems are safe.

Sponsors of Tomorrow

InfoWorld Latest News

IT Dashboard