MITRE ATT&CKsoftware (malware)

S0608 Conficker

Published 2021-02-23 Modified 2025-04-16 Official page ↗
Domain
enterprise, ics
Platforms
Windows
Aliases
Kido, Downadup
Version
1.0
Created
2021-02-23

Description

Conficker is a computer worm first detected in October 2008 that targeted Microsoft Windows using the MS08-067 Windows vulnerability to spread. In 2016, a variant of Conficker made its way on computers and removable disk drives belonging to a nuclear power plant.

Related

Uses · MITRE ATT&CK (16)

  • T1685 Disable or Modify Tools technique
  • T0826 Loss of Availability technique
  • T0828 Loss of Productivity and Revenue technique
  • T0847 Replication Through Removable Media technique
  • T1568.002 Domain Generation Algorithms sub-technique
  • T1021.002 SMB/Windows Admin Shares sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1543.003 Windows Service sub-technique
  • T1490 Inhibit System Recovery technique
  • T1210 Exploitation of Remote Services technique
  • T1027 Obfuscated Files or Information technique
  • T1046 Network Service Discovery technique
  • T1091 Replication Through Removable Media technique
  • T1105 Ingress Tool Transfer technique
  • T1112 Modify Registry technique
  • T1124 System Time Discovery technique

References