funsec mailing list archives

Malware-Speak' Spooks Symantec


From: "Fergie" <fergdawg () netzero net>
Date: Thu, 2 Mar 2006 18:36:24 GMT

Huh. This is interesting AND funy AND relates to security. ;-)

Brian Krebs:

[snip]

Symantec said Wednesday it plans to tweak the behavior of its Norton Internet Security and Norton Personal Firewall 
products so that they are no longer vulnerable to an annoying but otherwise harmless prank that "script kiddie" hackers 
have been using for the past week or so to knock users off online chat channels.

Turns out that if someone types "startkeylogger" or "stopkeylogger" in an IRC channel, anyone on the channel using the 
affected Norton products will be immediately kicked off without warning. These are commands typically issued by the 
Spybot worm, which spreads over IRC and peer-to-peer file-swapping networks, installing a program that records and 
transmits everything the victim types (known as a keylogger).

[snip]

More:
http://blog.washingtonpost.com/securityfix/2006/03/keylogger_utterance_spooks_nor.html

- ferg


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg () netzero net or fergdawg () sbcglobal net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: