Code Red Worm

Memory-resident worm that defaced IIS servers and infected hundreds of thousands of hosts in one day.

Core Principles & Analysis

• It exploited a buffer overflow in Microsoft IIS in July 2001, a month after the patch existed.
• Roughly 359,000 hosts were infected in under fourteen hours at its peak.
• Infected sites served the taunt "HELLO! Welcome to http://www.worm.com! Hacked By Chinese!".