Intrusion Prevention

Storm.Krackin.Botnet

Description

This indicates detection of network traffic originating from a computer infected with the Krackin version of the Storm worm.
The Storm worm is a virus that uses P2P networks and other methods to spread and launch spamming attacks. The Krackin version communicates through encrypted P2P traffic. See W32/Tibs.CD!tr for details.

Affected Products

Microsoft Windows operating systems.

Impact

System compromise: remote attackers can gain control of vulnerable systems.

Recommended Actions

Use up to date antivirus software to scan and clean all affected computers.