According to a report from security company Sensepost, the 'Code Red' scourge that brought the Internet to its knees on 19 July could resurge tomorrow.
According to the Sensepost team: "Not all instances of the Worm were destroyed after the first run and it is anticipated that the worm will become active again tomorrow - 31 July."
The worm attacks Microsoft IIS servers, using the recently discovered .ida exploit, and was responsible for infecting more than 250 000 systems in nine hours after its release.
IIS administrators are advised to patch any insecure IIS servers before tomorrow to avoid being attacked by the worm.
"Code Red is likely to start spreading again on 31 July 2001 8:00 PM EDT, and has mutated so that it may be even more dangerous," warns a SANS Institute advisory.
AP reports that the U.S. government made its most high-profile stand to date against an Internet worm on Sunday, urging organisations worldwide to protect themselves against the Code Red worm. Government officials joined leaders from Microsoft today in a press conference concerning the worm.
The worm is programmed to begin scanning the Internet for servers bearing the Index Server flaw found on IIS web sites, according to Computer Emergency Response Team, a security watchdog. The organisation also warns that unpatched servers are liable to denial-of-service attacks.
Share
