Witty Worm Tracked

Didnt you just want to know this

From CNet

A year after the Witty worm infected over 12,000 servers worldwide in just 75 minutes, researchers say they have discovered where the worm started and that the attack might have been an inside job.

Witty hit the Internet on March 19, 2004, taking advantage of a flaw in products from Internet Security Systems (ISS), including RealSecure and BlackIce. Its payload was malicious, corrupting the information on a system's hard drive. The worm crashed nearly half the systems it infected.

The researchers re-created how Witty propagated on the Internet, by combining knowledge of the worm's code and the random number generator it used to pick its targets.

They found that the worm was most likely launched from a server at a European Internet service provider and that it was set up to target systems at a U.S. military base.

Read more - http://news.com.com/Witty+worm+traced+to+Europe/2100-7349_3-5721261.html?tag=cd.top

Bertha

Bump

Bertha