Intrusion PreventionStorm.Krackin.Botnet
Description
This indicates detection of network traffic originating from a computer infected with the Krackin version of the Storm worm.
The Storm worm is a virus that uses P2P networks and other methods to spread and launch spamming attacks. The Krackin version communicates through encrypted P2P traffic. See W32/Tibs.CD!tr for details.
Affected Products
Microsoft Windows operating systems.
Impact
System compromise: remote attackers can gain control of vulnerable systems.
Recommended Actions
Use up to date antivirus software to scan and clean all affected computers.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 15083 |
| Created | Oct 23, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | Other |