[AfrICANN-discuss] collaborative effort to help defeat Conficker (aka Downadup) worm

ALAIN AINA aalain at trstech.net
Thu Mar 12 18:44:06 SAST 2009


hi all,

Sorry for late notice but wee've all been busy. I wanted for security  
reasons, to just reiterate something that is talked about in the below  
link on the ICANN website: the conflicker worm.
The Conficker worm uses DNS to receive instructions, to spread and  
launch DDoS attacks.  It contains an algorithm which randomly  
generates 250 domains names  for the week.  For example the list used  
during the week 17-31 jan from http://www.f-secure.com/weblog/archives/downadup_domain_blocklist_17_31.txt 
   shows domains under gtld and cctld. This keep changing and the  
number of domains generated keeps increasing with every new version of  
conflicker. So please be careful on registrations of domains names  
under your CCTLDs.

ICANN  announcement is at : http://www.icann.org/en/announcements/announcement-2-12feb09-en.htm 
   mentioned that some companies has joined the effort  to help  
contains the worn propagation and impact.

Best to all,

--alain
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.afrinic.net/pipermail/africann/attachments/20090312/eda3d57c/attachment-0001.htm


More information about the AfrICANN mailing list