Cyber Risks · Krebs on Security

Infamous Storm Worm Stages a Comeback

Summary: The Storm Worm, once responsible for 20 percent of spam sent worldwide before dying roughly 18 months earlier, was resurrected this week, and researchers say fingerprints in the new version suggest it was either rebuilt by its original creators or sold to another criminal malware gang. Honeynet Project analysts found 236 of 310 separate functions in the new worm matched the original, and security firm CA reported its operators are actively using infected PCs to relay junk email advertising male enhancement pills and adult websites.

What's compelling: The original Storm spread through peer-to-peer networks with no single command and control center to dismantle and launched crippling attacks on researchers who tried to infiltrate it - and the new version retains that attack capability, meaning the takedown playbook that worked before may not apply.

Read the original at Krebs on Security ↗

Topics
Malware
Related