Conficker Still Exists? The Hidden OT Malware Threat Putting Critical Infrastructure at Risk

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep115/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

Some of the biggest cybersecurity threats to critical infrastructure aren't new - they've simply never gone away.

In this episode of Protect It All, host Aaron Crow welcomes back Lesley Carhart for a fascinating conversation about why decades-old malware like Conficker continues to infect operational technology (OT) environments around the world.

Drawing on nearly two decades of industrial incident response experience, they share real-world stories from the front lines of critical infrastructure, explaining why legacy systems, operational constraints, and workforce shortages continue to make remediation incredibly challenging. The discussion goes far beyond "just patch it," exploring the difficult risk decisions organizations face when uptime, safety, and cybersecurity all compete for priority.

Aaron and Lesley also examine one of the industry's most pressing issues: the growing shortage of OT cybersecurity talent and the need to rebuild foundational technical skills for the next generation of defenders.

Key Learnings:

Why malware like Conficker still exists in modern OT environments

The unique challenges of removing malware from industrial control systems

Why patching isn't always possible in operational technology