Despite the small size of the virus

[relemedf5w023]

Researchers have found that Slammer is small in size (376 bytes) and operates using a unique technology, which is what ensures its extremely high rate of propagation. Despite its name, the worm did not use the SQL language — it used a buffer overflow in Microsoft SQL Server and Desktop Engine products. , it was able to create real traffic jams in data transmission channels, since after infecting a computer, it sent its code to random IP addresses in an endless loop. If a vulnerable computer was found at any of the addresses, it became infected and also began sending out copies of the virus. Five of the thirteen root DNS servers suffered from the attack.



SQL Slammer first became known in January 2003. It algeria whatsapp data a lot of noise back then – it managed to significantly slow down the speed of the Internet, and some regions, such as South Korea, were practically cut off from the Internet.

Despite the fact that Microsoft had released a security patch for SQL Server 2000 a year earlier, there were a huge number of unpatched server packages on the network, and most importantly, SQL Server is an extremely widespread program, which allowed Slammer to damage the global network. The company MI2G, which is engaged in research in the field of computer security, estimated the damage caused by the virus to the world economy at around 0.95-1.2 billion dollars.

SQL Slammer belongs to the class of so-called "disembodied" worms, which operate exclusively in the computer's RAM, which significantly complicates their detection and neutralization by traditional antivirus scanners. The first representative of this class of viruses was the CodeRed worm, discovered in the summer of 2001 and causing disruptions in the Internet, including in the Russian part of it. However, even at the peak of its activity, Code Red was much less dangerous.