Pirated Windows 7 software part of criminal botnet
- 13 May, 2009 07:38
- Comments
Microsoft Windows 7 pirated versions have been found with hard-to-detect trojans intended for cybercrime purposes, according to a security firm.
Microsoft Windows 7 release candidate, made available to developers last week, almost immediately was pirated through various channels, including Torrents and news groups, according to security company Damballa. A pirated version Damballa has seen had a malware Trojan packed into it that would give an attacker the ability to take control of a computer and download whatever additional malware they wanted.
Tripp Cox, vice president of engineering at Damballa, says the pirated version basically becomes part of a criminal botnet.The Trojan in this pirated version of Microsoft Windows 7 recently made use of the domain name "codecs.sytes.net" for its command-and-control, but Damballa worked with industry partners it declined to name to nullify its effective use.
Damballa then was able to observe the rate of piracy for the Windows 7 release and noted that cybercrime organizations appear to be ready to exploit it. Cox says Damballa has witnessed a few thousand downloads of the pirated version of Windows 7.
There's a "collusion" between "software pirates and cybercrime organizations," says Cox, who adds the pirated Windows 7 distribution that Damballa uncovered through its collection methods may be just one of several pirated versions with different malware characteristics.
Damballa contends that traditional signature-based antimalware detection methods will not likely be able to spot the Trojan embedded in the Microsoft Windows 7 pirated version. Damballa's products detect by monitoring botnet behavior, such as the ability of botnets to communicate via infected computers to command-and-control points.
Related Articles
Join the Computerworld Australia group on Linkedin. The group is open to IT Directors, IT Managers, Infrastructure Managers, Network Managers, Security Managers, Communications Managers.
- Bookmark this page
- Share this article
- Got more on this story? Email Computerworld
- Follow Computerworld on twitter
- Maximising productivity without sacrificing security
- IDC: Delivering Customer Value with Enterprise Flash Deployments
- HP Helps NEC Reduce Network Management Costs and Gain Efficiencies
- 2013 Global Information Security Survey: Initial findings
- Hybrid IT Service Management: A Requirement for Virtualisation and Cloud Computing
-
Turnbull criticises government's NBN budget cuts
-
Telstra apologises after customer records appear online
-
Conroy dismisses claims of NBN failing
-
Conroy dismisses claims of NBN failing
-
Conroy dismisses claims of NBN failing
