logo

Code Red (2001): The Worm That Defaced Websites

ID: 35d32fde-1132-55ea-9bd5-3d76997c17d5

STIX ID: report--35d32fde-1132-55ea-9bd5-3d76997c17d5

Feed Name: WatchGuard Secplicity Blog

Threat Score
75/100

Date Published: 2025-04-07

Date Updated: 2026-05-01

Author: The Editor

...
...

Historic review of the Code Red worm (2001): a fast-spreading IIS web server worm that exploited a buffer overflow to deface thousands of websites, launch DDoS attacks (including against the White House), and infect over 350,000 servers, causing millions in financial losses; the report notes the attackers sought notoriety rather than espionage and that intrusion prevention/endpoint security could have blocked the exploit.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.