S0608 Conficker

malwareEnterpriseICS

platformsWindows

also known asConficker · Kido · Downadup

Conficker is a computer worm first detected in October 2008 that targeted Microsoft Windows using the MS08-067 Windows vulnerability to spread. In 2016, a variant of Conficker made its way on computers and removable disk drives belonging to a nuclear power plant.

techniques used (16)

ATT&CK techniques this enables or maps to.

T0826Loss of Availability
T0828Loss of Productivity and Revenue
T0847Replication Through Removable Media
T1021.002SMB/Windows Admin Shares
T1027Obfuscated Files or Information
T1046Network Service Discovery
T1091Replication Through Removable Media
T1105Ingress Tool Transfer
T1112Modify Registry
T1124System Time Discovery
T1210Exploitation of Remote Services
T1490Inhibit System Recovery
T1543.003Windows Service
T1547.001Registry Run Keys / Startup Folder
T1568.002Domain Generation Algorithms
T1685Disable or Modify Tools

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan