[AfrICANN-discuss] collaborative effort to help defeat Conficker
(aka Downadup) worm
aalain at trstech.net
Thu Mar 12 18:44:06 SAST 2009
Sorry for late notice but wee've all been busy. I wanted for security
reasons, to just reiterate something that is talked about in the below
link on the ICANN website: the conflicker worm.
The Conficker worm uses DNS to receive instructions, to spread and
launch DDoS attacks. It contains an algorithm which randomly
generates 250 domains names for the week. For example the list used
during the week 17-31 jan from http://www.f-secure.com/weblog/archives/downadup_domain_blocklist_17_31.txt
shows domains under gtld and cctld. This keep changing and the
number of domains generated keeps increasing with every new version of
conflicker. So please be careful on registrations of domains names
under your CCTLDs.
ICANN announcement is at : http://www.icann.org/en/announcements/announcement-2-12feb09-en.htm
mentioned that some companies has joined the effort to help
contains the worn propagation and impact.
Best to all,
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the AfrICANN