Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

MyDoom Still Active in 2019

Summary: Unit 42 reports that MyDoom, the worm first noted in early 2004 and estimated to have caused $38 billion in damage, still accounted for an average of 1.1 percent of malicious emails from 2015 through 2018 and held 21.4 percent of individual malware attachments seen through malicious email. In the first six months of 2019 the malware continued at a similar rate, with tens of thousands of samples recorded monthly, most sent from IP addresses registered in China and the United States, and most targeting high tech, wholesale, retail, healthcare, education, and manufacturing.

Bottom line: A 2004 worm still generating tens of thousands of samples a month means infected infrastructure has persisted for roughly 15 years, and MyDoom turns each infected Windows host into a spambot that sends mail even without a mail client installed.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related