Vulnerability Development mailing list archives

RE: Infecting the KaZaA network? (moving here thread from 'traq)


From: Thierry Zoller <support () sniff-em com>
Date: Thu, 14 Feb 2002 12:32:23 +0000 (GMT Standard Time)

This is done from the kazaa website
(or CNET download.com).  
The issue was thatKazza uses there Cloud load (TM) "Technology" to download the
latest build, which means nothing more than connecting to the kazaa network and
searching for the latest kazaa executable, then downloading it *from the users*

That's why the initial posting suggested a trojaned version being deployed.

Theirry


Current thread: