NEWS FROM THE LAB - Monday, January 12, 2009

Preemptive Downadup Domain Blocklist, Jan. 13-16 Posted by Sean @ 15:06 GMT

Downadup variants use algorithmically determined URLs to report back to the bad guys.

Reverse engineering the worm's code provides us with the method to predict which domains may be used in the future.

Today's preemptive blocklist includes an additional 1,000 URLs that WILL BE used by the Downadup from the 13th to the 16th.

Network administrators can use this list as a preventive measure.

Click the image below to view the list:

Downadup Domain Blocklist for January 13-16