Calling the panic over the virus an “April fool's joke”, he said it was a classic example of how the mainstream news media misunderstood the threat from malware and used it to make news to the detriment of security.
“Conficker pushed a few good buttons,” he said.
“It appeared to come from nowhere, it had a funny-sounding name – and research shows unusual names provoke fear – and it came on a 'magic' date. But it was the classic boy who cried wolf story.”
He pointed out that for all the media frenzy, the malware didn't even reveal itself on April 1st. Instead it did so five days later, by which time the media had forgotten the story.
“This is why I tell people that if it's in the news then it's nothing to worry about,” he said.
“By definition news is something that happens rarely, because that's what news is.”
While the technical press were among the few to point out that there was from the Conficker worm, many media outlets speculated wildly that the worm would cause massive damage.
Schneier said that such cases may have helped vendors sell more security products but in some ways they made the situation worse, since people became inured to virus stories and this might lead them to ignore future warnings.
Conficker frenzy 'exposed media ignorance'
By
Iain Thomson
on Apr 27, 2009 9:17AM

Got a news tip for our journalists? Share it with us anonymously here.
Partner Content

Channel can help lead customers to boosting workplace wellbeing with professional headsets

Build cybersecurity capability with award winning Fortinet training from Ingram Micro

How NinjaOne Is Supporting The Channel As It Builds An Innovative Global Partner Program
Ingram Micro Ushers in the Age of Ultra

Kaseya Dattocon APAC 2024 is Back
Sponsored Whitepapers
-1.jpg&w=100&c=1&s=0)
Stop Fraud Before It Starts: A Must-Read Guide for Safer Customer Communications

The Cybersecurity Playbook for Partners in Asia Pacific and Japan

Pulseway Essential Eight Framework

7 Best Practices For Implementing Human Risk Management

2025 State of Machine Identity Security Report