Conficker.B/Downadup.B/Kido: F-Secure publishes details pertaining to their counting methodology of compromised machines

SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Conficker.B/Downadup.B/Kido: F-Secure publishes details pertaining to their counting methodology of compromised machines
Some of our readers have pointed out that more media attention is being given to the rather alarming and large number of compromised machines that have been tallied by F-Secure in their "Weblog: News from the Lab" site. For example CNN have picked up on the story here: http://www.cnn.com/2009/TECH/ptech/01/16/virus.downadup/index.html If you now turn your attention to the latest entry on the F-Secure website, you will now be able to read about their finer details of how they are producing their tally: http://www.f-secure.com/weblog/archives/00001584.html In summary it is a combination of the "q=" value from the GET call, - combined with an assessment of unique IP addresses being tracked over time, that yeilds their final tally. I would encourage you to read their fine details as per the link above. G.N. White Handler on Duty (Happy Friday!)	G. N. 23 Posts Jan 16th 2009
Thread locked Subscribe	Jan 16th 2009 1 decade ago