Conficker
Software · ATTACK:ics:S0608
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:S0608",
"title": "Conficker",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0608",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--58eddbaf-7416-419a-ad7b-e65b9d4c3b55",
"external_id": "S0608",
"domain": "ics",
"created": "2021-02-23T20:50:32.845Z",
"modified": "2025-04-16T20:38:10.239Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Kido"
},
{
"source_name": "Downadup"
},
{
"source_name": "SANS Conficker",
"url": "https://web.archive.org/web/20200125132645/https://www.sans.org/security-resources/malwarefaq/conficker-worm"
},
{
"source_name": "Conficker Nuclear Power Plant",
"url": "https://news.softpedia.com/news/on-chernobyl-s-30th-anniversary-malware-shuts-down-german-nuclear-power-plant-503429.shtml"
}
]
}Explicit source assertions (3)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:S0608 → uses → ATTACK:ics:T0828
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--51f9963c-c041-4bec-b482-5fda2fb5bca4
Catalin Cimpanu April 2016ATTACK:ics:S0608 → uses → ATTACK:ics:T0847
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--71422483-33e4-4131-a4ec-40322d91d8a0
Catalin Cimpanu April 2016 · Symantec June 2015ATTACK:ics:S0608 → uses → ATTACK:ics:T0826
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--990f944f-190d-456d-b194-f5ecb17a0868
Catalin Cimpanu April 2016