Secure USB Drive

It looks like USB flash drives are becoming a popular vector for spreading malware.  A 4 year old worm has been reactivated and is now spreading through the use of thumb drives, according to Microsoft’s Malware Protection Center (MMPC).

According to the MMPC, the ‘Neeris’ worm is copying some of the infection strategies of Conficker.  The timing of its reappearance is also unusual, as it appeared a day before Conficker’s ‘activation’ date of 1st April.

Neeris’ makers have recently added an exploit for the MS08-067 vulnerability that Microsoft patched in October last year.  Conficker also exploits this vulnerability and became one of the biggest malware outbreaks ever, early in 2009. 

Although Neeris is not yet widespread, and its purpose and effect seems to be relatively benign at this point, it’s worth making sure that all systems are patched against the MS08-067 vulnerability, as detailed in the link above.