3 ms·
If those network requests could be identified, the whole thing would be shut down by network operators.
by kybernetikos 9y ago
If those network requests could be identified, the whole thing would be shut down by network operators.
- derefr 9y agoInstances of the worm could notice they've landed on especially-low-activity systems with open ports, and then modify their own "descendants" to contact them on that host for key-generation. (And then relay the key material to the origin host, before wiping their local copy.) If the worm then notices that their host "goes active" (e.g. starts a login session), they could "submerge", closing the relevant ports and so forth, until the activity goes away; and their descendant instances would, while this is happening, fall back to the ancestor[N+1]th host.