Meet Waledec, Conficker’s Child

Written by Carl E. Reid on April 21, 2009

virus-worm1Indy.com reported in early April 2009 about the waledec bot riding along with Conficker virus. “Conficker, for the first time, moved beyond sitting quietly on millions of Windows computers worldwide to infecting other vulnerable computers.

This means many more consumers could end up with a variant of Conficker. You also could catch a worm that’s now tagging along for the ride.

This new worm, called Waledec, can open a back door to your computer to steal information or to allow an outsider to control it, security experts warn.”  Waledec’s goal is to make money by harnessing the power of an infected computer and millions of other computers to create a massive “bot network,” or “botnet,” to send out spam.

As recently as April 17, 2009 ZDNet reports the Waledec botnet is on the move again.  For waledec to be effective, cyber criminals are relying on the rotation of different “Subject” themes and the email user’s ignorance of its existence.   That is a hint to educate your email users ASAP.

Some typical Waledec spam email subjects being used:

  • Can your love life be re-ignited?
  • Are you sure in your partner’s faithfulness?
  • Now, It’s possible to read other people’s SMS
  • We will tech you to be the master of making love art
  • Just type the phone number and read SMS
  • Do you want to test your partner?
  • Have more fun and pleasure in your intimate life
  • Now, you can read any SMS messages from any mobile phones
  • Keep a spy eye on your Girlfriend’s mobile
  • What’s Your Hall of Shame
  • Are you ready to know the truth?

The actual Waledec message body is something like “Get Your Free 30-Day Trial! Do you want to test your partner or just to read somebody’s SMS? This program is exactly what you need then! It’s so easy! You don’t need to install it at the mobile phone of your partner. Just download the program and you will able to read all SMS when you are online. Be aware of everything! This is an extremely new service!”.

Any other unknown conficker children you want to share with us?  Let us know with a comment.

About Carl E. Reid

Developing his career from the mail room to the board room, Carl E. Reid has achieved success by skillfully blending 40 years of technology and business intelligence experience with his passion for helping companies succeed. Carl is founder and CEO of NetTECH Systems Reid & Associates, Inc., an emerging technology consulting company located in the New York City area. One of his specialties is 15 years as a collaboration and email infrastructure consultant. He has implemented and supported Lotus Notes/Domino and other types of SMTP gateway/network configurations in small to large global companies up to 33,000 employees. Some of his clients have included IBM, Citi, JPMChase, Oxygen, LVMH - Moet Hennessy, MeadWestvaco, non-profits and professional organizations. Carl is a Savvy Business Owner, Public Speaker and Author. His articles have appeared in Network World, Computer Monthly magazines and hundreds of web sites. Combining business technology consulting with professional blogging, Carl specializes in advising clients how to best leverage the Internet as a tool for high impact visibility. Carl's speaking style combines humor with expertise, and his advice is always down-to-earth and practical. He personally publishes Library of Congress recognized newsletter blog, http://www.SavvyIntrapreneur.com and http://www.iTechSpeak.com. Carl wrote the original "Professional Blogger Job Description", being used as standard document within companies. As a business career coach, Carl teaches professionals how to run their career as a profitable business.

Comments

Zerolove April 21, 2009

I believe that the Waledec worm was discovered around 12/2008, so the Waldec was before Conflicker making it impossible except for some rip in the space time continuum of it being the parent. Who knows tho, the Virus/Worm authors may have figured out time travel?

Carl E. Reid April 23, 2009

Zerolove,

You’re absolutely right about Waledec pre-dating Conficker. Thank you for pointing that out. This article was just highlighting Waldec reappearing by getting a free ride on Confiker’s propogation, while reminding our email administrators of its continued existence.

  • (required)
  • (required)