Dual-mode worms Permutation scan, but instead of stopping, move to a rarer vulnerability Much more efficient than multi-mode (e.g. going after both at once)