Storm Worm Botnet Lobotomizing AntiVirus Programs


Storm Worm Botnet Lobotomizing AntiVirus Programs


The ever mutating, ever stealthy Storm worm botnet is adding yet another trick to its vast repertoire: Instead of killing antivirus products on target systems, it's now doing a hot fix with a memory patch to render them brain dead.

The finding was made by Sophos and was mentioned by Joshua Corman, a principal security strategist for IBM Internet Security Systems, Oct. 23 in his presentation here at Interop on the challenge of evolving cyber-threats.

...The strategy means that users won't be alarmed by their anti-virus software not running. Even more ominously, the technique is designed to fool NAC (network access control) systems, which bar insecure clients from registering on a network by checking to see whether a client is running anti-virus software and whether it's patched.

"It's running but brain-dead. It's worse than shutting it off," as it opens the door for Storm bots to waltz past even networks considered to be hardened with NAC, Corman said during his Interop presentation. Storm Worm Botnet Lobotomizing Anti-Virus Programs

Linked by shanmuga Friday, 26th October 2007 11:44PM



20% off Spyware Doctor and Registry Mechanic - use coupon code: pctools20. Click Here Now!


$10 off on Spy Sweeper. And shop safe this holiday season. Click Here Now!


15% on Norton AntiVirus 2008 - coupon code: 10NAV08. Click Here Now!




Back to: PC Security, privacy news


More News, Articles from elsewhere


The fine print

All trademarks, product names and company names or logos cited herein are the property of their respective owners. News content is the property of their respective authors/owners/publishers.

Malware Help. Org does not represent, warrant, or endorse the accuracy, reliability, completeness or timeliness of any of the information, content, views, opinions, recommendations or advertisements contained on, distributed through, or linked, downloaded or accessed from any of the information contained in this News Story.

By reading this you understand and agree that everything that is written in this article is for educational use only, and none of it should be used at any circumstances, and if you choose to use this information for any kind of action you take full responsibility for it and release Malware Help. Org (c) of any responsibility. If you do not agree to whats written here, LEAVE NOW!

Webmasters! Don't want your site's news/articles appear here, No problem, please drop me a line, Malware Help. Org will be happy to comply with your wishes.

About the RSS News feeds and News articles from other sites