Vulnerability Development mailing list archives

Re: Badware update through P2P?


From: "Mark Robinson" <mark.robinson () paradise net nz>
Date: Thu, 18 Jul 2002 08:50:14 +1200

IIRC some virii or trojan horses tried to fetch updates from web pages,
usually on free hosting services. And as soon as they are detected, the
web account is closed and the dangerous files removed, so this does not
look like a very efficient chanel.

What would happen if such a nasty piece of code used some P2P protocol
to update itself? e.g. Gnutella or eDonkey? Has anybody seen such a
"feature"?

Kazaa does something like this.

Updates are thrown into the file sharing miasma and can and will be downloaded in chunks from a large (!)number of 
different
unqualified systems by any system which is being upgraded.

Mark Robinson


Current thread: