An old USB worm created in 2019 by unknown attackers, is still active and continues to self-replicate even though its creators lost control of it, security researchers revealed.
Researchers discovered that the USB worm, which infects devices automatically when connected to infected USB drives, is still alive due to the abandoned command-and-control channel, remaining on possibly millions of machines and infecting new ones daily.
Security researchers from Sekoia have intercepted PlugX traffic from 90,000 to 100,000 unique IP addresses every day, post-purchasing the abandoned IP address used by the worm's creators, demonstrating the continued activity of the worm.
[
add
]
[
|
|
...
]