Tuesday, March 31, 2009

Conficker worm is no April Fool's joke

I have an apple and I don't know if it will be affected like most PCs will be. I don't think I have anything to worry about since their security is much better than PCs. I do have a lot of friends though who are freaking out about the Conficker worm and will not even be getting online tomorrow.

By McNelly Torres | South Florida Sun-sentinel

Cyber security experts are warning that a new variation of Conficker, a fast-spreading computer worm also known as Downadup, could attack millions of computers on Wednesday -- April Fool's Day.

Personal computers and laptops already infected with Conficker could automatically be linked to the servers operated by the hackers.

Esteban O. Farao, a consultant with Enterprise Risk Management, a Miami security consulting company, said the worm is not destroying files or stealing data, but it has the capability to do so.

"The main concern about this worm is that it is capable of downloading additional code from the hacker's Web site or through a peer-to-peer connection," Farao said. "Consequently it can bring more functionalities or receive instructions."

Experts say it's unknown whether the worm will cause havoc or merely turn out to be an April's Fool prank. But people can protect their computers by using security software.

Howard Schmidt, a former White House cyber security adviser, said computer users need to download an application of Microsoft software to detect and disable the worm.

Experts also advise keeping your security applications and operating systems updated.

"The most interesting thing about this worm is that every time someone finds out a way to get rid of the worm, it reinvents itself with more rigor and better technology," Schmidt said.

Authorities have not identified the culprits behind the worm or their intentions. Microsoft has offered a $250,000 reward to bring the Conficker creator to justice.

The Conficker worm, which has infected 10 million computers outside the United States, is a program that exploits weaknesses in Microsoft's Windows operating system including Windows XP, Windows Vista, Windows Server 2003 and Windows Server 2008.

The worm surfaced last November in computers on weak networks such as those in coffee shops, airport or offices. The second variation can spread via shared networks, including removable drives such as USB devices.

This worm also blocks infected systems from downloading new security software or receiving updates for security software. After attacking, it connects to a server where it receives instructions to propagate and gather personal information. Conficker creates a back door in the system where the worm can download and install additional programs.

Albert Whale, owner of ABS Computer Technology Inc., a Pittsburgh company that offers computer consulting services, said experts think the hackers are making money by getting information to send spam or attack people they don't like.

"Hackers spend 24 hours a day perfecting their craft," Whale said. "People don't even spend an hour a week securing their computers."

Staff researcher Barbara Hijek contributed to this report.

No comments: