03.27.09
GNU/Linux Really Can Save Us from Conficker
Summary: When tools for fighting against Conficker only run on GNU/Linux
COMPANIES WHOSE machines leak sensitive data, attack other machines, and cause other forms of sabotage need not fret. They can finally assess the damage already done, if any. They will, however, need to get hold of GNU/Linux first.
To help companies detect Conficker scans and probes on their networks, MicroSolved is offering a free tool – a Linux-only HoneyPoint GUI. You can download the zip file from here.
Isn’t it a classic? GNU/Linux is required for repair of damage caused by a Microsoft Windows-exclusive problem. Conficker is still very much alive by the way. From the latest news:
1. Conficker: The Windows Worm That Won’t Go Away
The Conficker worm continues to slither its way across the Internet, and a major update for the malware is looming on April 1. Just what will happen is anyone’s guess, security researchers say, but there are malware removal tools and protections out there for users.
2. Final countdown to Conficker ‘activation’ begins
Starting on 1 April, Windows PCs infected by the latest variant of the Conficker worm (Conficker-C) will start attempting to contact a sample of 50,000 pre-programmed potential call-home web servers from which they might receive updates, a massive increase on the 250 potential web server locales used by earlier variants of the code.
To diagnose the problem, a GNU/Linux-based HoneyPoint can be used, but why not address and resolve the problem at the source? As we explained before, "Conficker is a Blessing to GNU/Linux." Those who want to resolve the problem for good can prepare for a migration to GNU/Linux. It has already saved the French police a bundle. █
More on Conficker
- Microsoft’s Blame-Shifting Strategy Precedes More Trouble
- Leave Microsoft Alone
- Never Blame Microsoft, Blame Users and Exploits
- Botnets and Bounties Versus Real Security
- Is Windows to Blame for Cracking of Federal Aviation Administration (FAA)?
- Windows Problems Take Down Airplanes, JFK Airport, Houston Municipal Courts
- Turkey, France, United Stated Under Attack by Microsoft Windows Insecurities
- Microsoft Adopts Malware Techniques to Advance .NET
- Windows Botnets Go Out of Control, Obama Web Site Delivers Windows Malware
- One Windows Worm, One Week, and Possibly 250,000,000+ New Windows Zombies
- Death by Microsoft Windows
- UNIX/Linux Offer More Security Than Windows: Evidence
- US Army Becomes Zombies Army; London Hospitals Still Ill (Windows Viruses)
- Eye on Microsoft: Another Messy Week for Security
A_Linux_Guy said,
March 28, 2009 at 3:07 pm
“GNU/Linux is required for repair of damage caused by a Microsoft Windows-exclusive problem”
That’s actually a false statement. The honeypot doesn’t FIX anything. It’s also not required. I’d bet most companies that FIX the conficker problem in their environments will not use this software.
You’re stretching on this one.
A_Nother_Linux_Guy said,
April 1, 2009 at 6:48 am
Well i use linux here and there and i run windowes vista with 0 updates and no protection what soever i never disabled auto run or did any fancy stuff im i am perfectly fine so im having fun and laughing at all the idiots on the internet.