Botnet

Conficker

First seen: 2008 • Status: inactive

Currently Inactive

Conficker was like a computer plague that infected millions of computers around the world, showing how dangerous worms could become.

Overview

Conficker was one of the largest botnets ever created, infecting millions of computers worldwide. It exploited MS08-067 and used advanced techniques for its time.

Also Known As

Downadup, Kido

How It Spreads

  • MS08-067 exploit
  • USB drives
  • Network shares
  • Weak passwords

What It Does

  • Botnet creation
  • Spam distribution
  • Malware delivery
  • Domain generation algorithm

Is your business exposed?

Target Platforms

Windows

Detection Tips

  • Ensure MS08-067 is patched
  • Monitor for DGA domain requests
  • Check for autorun.inf on USB drives
  • Review account lockouts

MITRE ATT&CK Techniques

T1210, T1091, T1021, T1568

If You're Infected

  1. 1.

    Patch MS08-067

  2. 2.

    Disable USB autorun

  3. 3.

    Use strong passwords

  4. 4.

    Run Conficker removal tools

Related Malware

Wannacry, Mirai

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required