Linux Today: Linux News On Internet Time.

Conficker Twitch Leaves Security Sleuths With More Mysteries to Solve

Apr 10, 2009, 22:33 (5 Talkback[s])
(Other stories by Richard Adhikari)

"One conundrum: They don't know why it has a kill switch that apparently kicks in on May 3.

"Also, the new variant has a mysterious dropped component. It will eventually delete that component, and researchers are still trying to figure out why.

"Puzzles, Anyone?

"The new variant is not a single program but actually several related components, David Haley, director of malware intelligence at Eset, told TechNewsWorld. It is a subvariant of Conficker.A, the very first version of Conficker, which came out late in 2008, he said. Security experts are still scrambling to unravel Conficker.AQ's code, but they have come up with tidbits that raise more questions than they answer. Take the kill switch, for example. "We're still trying to determine why Conficker will turn itself off on May 3," Ivan Macalintal, a member of the Conficker Working Group, which was set up to fight the worm, told TechNewsWorld."

Complete Story

Related Stories: