$this->articleCE->primaryUrlById(3813876) = /security/article.php/3813876/Say+Hello+to+Confickers+Cousin+Neeris.htm
Say Hello to Conficker's Cousin, Neeris - InternetNews.
RealTime IT News
   

Say Hello to Conficker's Cousin, Neeris

By Sean Michael Kerner   |    April 06, 2009
Page 1 of 1


Netstat -vat by Sean Michael Kerner (bio)

A command line view of IT


Conficker, Neeris and malware
From the "So now they're a family?" files:

Apparently Conficker isn't the only worm out there trying to exploit a flaw Microsoft patched in October. A worm called Neeris is out taking advantage of the same Conficker flaw, and perhaps more interestingly its creators have learned a few things from Conficker too.

"Neeris is a worm that has been active for a few years," Microsoft security researchers Ziv Mador and Aaron Putnam blogged. "Some of its variants used to exploit MS06-040 which addressed a vulnerability in the same Server service as MS08-067. However it looks like the authors of Neeris have been taking notes from Conficker. A new variant of the Neeris worm has been launched this week."

The Microsoft researchers noted that the new version Neeris became prevalent in the lead up to the dreaded April 1st activation date for Conficker.

[Continue reading this blog post at Netstat -vat by Sean Michael Kerner]