Conficker's 6m strong botnet confounds security probes The unknown crooks behind the infamous Conficker worm may be quietly selling off parts of the huge botnet established by the malware, but virus fighters have no way of knowing because the cryptographic defences of its command and control network have proved uncrackable. Conficker (aka Downadup) first appeared in November 2008 …
"Rodney Joffe, a senior technologist at net infrastructure firm Neustar, dismisses the theory that Conficker was a failed experiment or "research project" by cybercrooks, perhaps one that was too successful to be useful. In particular he's dismissive of the idea that the botnet remains dormant because activating it would provoke unwelcome law enforcement attention."
And what is the probability of Conficker being an ongoing deepening experiment and classified research project for Sublime Command and Control of Global Operating Devices and Communicating Computers?
Conficker works well beyond provocative unwelcome law enforcement attention's reach, methinks, although they themselves would be easily reached and breached with an swarming infestation/rabid rush of unusual activity/irregular and unconventional trade and exchange in their communications networks.
Which would all suggest Conficker be AI Governmental Spyware ....... BetaTesting Quantum Communications Protocols.
Heap Powerful Medicine for Wizards and Witches, Satyrs and Nymphs, Great and Good Saints and Sinners.
"Are you sure you don't mean "damp squid"? :)" .... Craig Foster Posted Thursday 5th August 2010 23:04 GMT
What do you give a man who has everything and an octopus to play with? Stealthy Virile Code and Dodgy Binary Keys for Remote Kernel Control of Classified Information and Future SMART Intelligence. Or is that Created In-house and On Board with Computers Communicating and thus a Gift of One's Own Making for the Sharing and the Taking.
Which would quite a powerful lead-in teaser for a Vulcan Production dealing Virtual InSanity and Virgin Madness ..... for Multiple Orders of Dynamic Organised Chaos. .....
Which is for some just a Job to Plug into for Input to Output.
..use facebook, myspace, wired.com, youtube and all the other sites that allow for unmoderated comments to perform command and control ?
That would take away the need to set up domains and the consequential C&C vulnerability.
The messages would be gpg-signed commands, obfuscated through some sort of steganography.
At least Conficker is nice and gives some serious clues to the tech savvy that it is there...
Network traffic goes through the roof and windows update disabled... Hmmmm... Might notice that!
Personally I'm more worried about one that doesn't disable windows update, which spreads quietly without flooding the network, and has so far gone unnoticed!
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
