Code Red

lore

securityweb dev

The July 2001 IIS worm that defaced sites with 'Hacked By Chinese!' and infected hundreds of thousands of servers in hours.

Code Red exploited a buffer overflow in Microsoft IIS, spread with no file on disk, defaced English-language sites, and pointed a coordinated flood at the White House's address. CAIDA measured more than 359,000 infected hosts in under fourteen hours, the first hard data on how fast an Internet worm could really move. The eEye researchers who dissected it named it after the Code Red flavor of Mountain Dew they were drinking.

All glossary entries