Storm worm strikes back at security pros

[Humpty]

Is this another "Storm" in a teacup or real?

The Storm worm is fighting back against security researchers that seek to destroy it and has them running scared, Interop New York show attendees heard Tuesday.

 

The worm can figure out which users are trying to probe its command-and-control servers, and it retaliates by launching DDoS attacks against them, shutting down their Internet access for days, says Josh Corman, host-protection architect for IBM/ISS, who led a session on network threats.

 

?As you try to investigate [storm], it knows, and it punishes,? he says. ?It fights back.?

 

As a result, researchers who have managed to glean facts about the worm are reluctant to publish their findings. ?They?re afraid. I?ve never seen this before,? Corman says. ?They find these things but never say anything about them.?

 

And not without good reason, he says. Some who have managed to reverse engineer Storm in an effort to figure out how to thwart it have suffered DDoS attacks that have knocked them off the Internet for days, he says.

Article

[speytone]

i think its all smoke and mirrors.

[Caldor]

These sorts of techniques were always going to be used.

 

Just like how storm doesnt activate in a virtual machine.