Confick worm exploits Microsoft MS08-067 vulnerability

Back in October warnings were given about a critical security vulnerability found in some versions of Microsoft Windows.

Known as as MS08-067, Sophos published information about this serious vulnerability and warned of the potential for worms to be written which would exploit the security hole.

Now Sophos has begun to receive reports of a new piece of malware (W32/Confick-A, also known as Conficker) that attempts to spread by exploiting this vulnerability.

If the knowledge that Microsoft chose to release a security patch outside of its normal monthly cycle wasnt enough to stir you into action, then news of the new worm definitely should. Its always better to do everything possible in advance of a piece of malware being released, rather than mopping up afterwards.

If you havent already done so, Sophos recommend that you get the patch from Microsoft, and make sure your anti-virus is properly up-to-date.