Efforts to combat Conficker worm an arms race

Combating malware continues to be an arms race. The bad guys are always one step ahead. The majority of malware writers are often well educated, well funded and supported by large criminal organizations like the Russian Business Network . The days of teenagers writting malware in their parent's basement are far gone.

Yesterday came word that Conflicker has evolved again, and continues to find ways to confound and frustrate security researchers. A new analysis of Conficker by SRI International reports: "In addition to the dual layers of packing and encryption used to protect A and B from reverse engineering, this latest variant also cloaks its newest code segments, along with its latest functionality, under a significant layer of code obfuscation to further hinder binary analysis."


Related Story: Conficker/Downadup Evolves