The Cyber Secure Institute is warning Internet security experts not to be casual about threats posed by the Conficker virus. Although the virus has not caused any major problems since it surfaced on the internet, there could be long term attacks planned, claims the institute.

 

Conficker targets the Microsoft (News - Alert) Windows operating system with a combination of advanced malware techniques. The virus is believes to be the largest computer worm infection since the 2003 SQL Slammer. The virus spreads by exploiting vulnerability in a network service (MS08-067) on Windows 2000, Windows XP, Windows Vista, Windows Server 2003, Windows Server 2008, and Windows Server 2008 R2 Beta.

 

The Cyber Secure Institute warns that the virus has been slowly evolving, and it is widely believed that its creators are simply taking their time to figure out the best way to utilize its ability to make money. The worm's recent behavior has given enough reasons to the security experts to believe that Conficker is a long-term money-making project.

 

In another report released by Commtouch, it was warned that the next quarter could witness a meaningful rise in spam levels due to computers infected by the Conficker worm. According to the report, Brazil produced nearly 14 percent of active zombies for the quarter and continues to lead in zombie computer activity. Throughout the quarter, spam levels averaged 72 percent of all email traffic and peaked at 96 percent of all email messages in early January.

 

An update to this virus, released in April this year, claims to fix the viruses "detected" on the user's computer for a fee, but it is often intended to steal personal information. In its recent press release, the Internet Crime Complaint Center (a partnership between the FBI and the National White Collar Crime Center) stated that, "Complaints of online crime hit a record in 2008, with a total dollar loss of $256 Million. The average individual loss amounted to $931."

 

Microsoft has already announced a $250,000 reward for information that results in the arrest and conviction of those responsible for the spread of this malicious code.