Contents
How does Code Red virus work?
Code red is a computer worm that was identified in July 2001, when computers running on Internet Information Services (IIS) web server of Microsoft were found compromised. It displays a text string “Welcome to worm.com Hacked by Chinese!” and it runs on the memory erasing all files present in the hard drive.
How was the Code Red worm stopped?
The worm has gone worldwide again, infecting vulnerable web sites at an increasing rate. In comparison, on 19th of July, Code Red infected around 300,000 servers, and was only stopped because the worm stopped infections by itself.
How did Code Red propagate?
After almost one month, the first version of Code Red worm that exploited this vulnerabil- ity emerged on July 13th, 2001 [11]. Due to a code error in its random number generator, it did not propagate well [23]. This new worm had implemented the correct random number generator. It generated 100 threads.
How fast did Code Red virus spread?
The Spread of the Code-Red Worm (CRv2) On July 19, 2001 more than 359,000 computers were infected with the Code-Red (CRv2) worm in less than 14 hours. At the peak of the infection frenzy, more than 2,000 new hosts were infected each minute.
Who made the Code Red virus?
The Code Red worm was first discovered and researched by eEye Digital Security employees Marc Maiffret and Ryan Permeh, the Code Red worm exploited a vulnerability discovered by Riley Hassell. They named it “Code Red” because Code Red Mountain Dew was what they were drinking at the time.
When did the Code Red worm come out?
Code Red was a computer worm observed on the Internet on July 15, 2001. It attacked computers running Microsoft’s IIS web server. The Code Red worm was first discovered and researched by eEye Digital Security employees Marc Maiffret and Ryan Permeh when it exploited a vulnerability discovered by Riley Hassell.
What kind of vulnerability does the Code Red worm exploit?
The Code Red worm exploits a vulnerability in Microsoft’s Internet Information Services (IIS) versions 4.0 and 5.0, and also attacks certain models of Cisco routers. The worm works by scanning the Internet, identifying computers running the vulnerable IIS servers, and infecting these servers with copies of itself.
When did Code Red appear on the Internet?
Code Red was a computer worm observed on the Internet on July 15, 2001.
Why was the worm called Code Red Mountain Dew?
They named it “Code Red” because Code Red Mountain Dew was what they were drinking at the time. Although the worm had been released on July 13, the largest group of infected computers was seen on July 19, 2001. On this day, the number of infected hosts reached 359,000.