Feeds

IT giants whacked by Code Red

Lucent joins Microsoft in the hall of shame

  • alert
  • submit to reddit

High performance access to file storage

The IT industry has demonstrated its fumbling approach to dealing with major security issues once again with the outbreak of the Code Red worm.

As previously reported, our spies in Redmond told us Microsoft's internal network became infected with Code Red, almost certainly after a smart-arsed techie saw fit to ignore the software giant's security policy.

If Microsoft feels embarrassed at being caught out by Code Red after so publicly warning the rest of the world about it, then the software giant can console itself that it's not alone. Associated Press and FedEx have reportedly fallen victim to the bug and Register readers have told us that Computer Associates' network was downed by the Code Red worm last week.

Despite repeated attempts we haven't been able to get CA to either confirm or deny this rumour, which (if true) would be highly embarrassing for a firm that is such a big player in the security market.

Among the other casualties of Code Red was accident prone telecoms equipment manufacturer Lucent Technologies, which advised users to help it patch up its servers after IT staff discovered that at least 200 of its systems were infected by the worm. A memo was sent around to all Lucent staff on the issue, which we republish below.

To: ALL Windows NT or Windows 2000 users
Re: Code Red 2

On 8/4, a new version of Code Red (Code Red 2) hit the Internet, creating even greater exposure to the environments it infects - i.e., it allows unauthorized access to the infected computer.

On 8/5, Lucent was infected by the Code Red 2 virus. It has spread rapidly throughout "unpatched" systems globally and is causing some network outages. At last measurement, 200+ systems are infected, degrading network performance as they attempt to locate vulnerable systems on the Internet at a growing rate of 1.4 million requests every 2 minutes.

Lucent needs your help! Every user with any Windows NT or 2000 system (desktop, server, home, laptop, etc) must click on the following link and follow the instructions provided! This is the only way Lucent will be able to rid the worm from our environment.

Failure to comply with this request will result in the disconnection of network services to the affected systems. In addition, the system administrator/user will be identified and provided to management for disciplinary action up to and including termination.

http://www.security.lucent.com/virus/codered2

If you have any questions, please e-mail security@security.lucent.com or call the Lucent Security Hotline on 1.888.582.2267.

Lucent Security

You'll note that the email contains a threat of dismissal for any staff failing to help the firm's management contain the outbreak of the worm.

Those with long memories will remember that the first major Outlook email worm, Melissa, infected a whole tranche of IT firms, including Lucent and Microsoft. Isn't it interesting to see the same names cropping up on a list of those that got it wrong about Code Red as well? ®

Related Stories

MS internal network whacked by Code Red
Code Red and the Cisco Side Effect
Son of Code Red is born
Internet survives Code Red
IIS worm made to packet Whitehouse.gov
Justice mysteriously delayed for 'Melissa' author

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Parent gabfest Mumsnet hit by SSL bug: My heart bleeds, grins hacker
Natter-board tells middle-class Britain to purée its passwords
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
OpenSSL Heartbleed: Bloody nose for open-source bleeding hearts
Bloke behind the cockup says not enough people are helping crucial crypto project
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
German space centre endures cyber attack
Chinese code retrieved but NSA hack not ruled out
NSA denies it knew about and USED Heartbleed encryption flaw for TWO YEARS
Agency forgets it exists to protect communications, not just spy on them
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
HP ArcSight ESM solution helps Finansbank
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.