Rootkit huijauksia

F-SECURE: Poker gamers targeted by a rootkit backdoor

http://www.kauppalehti.fi/4/i/eng/releases/press_release.jsp?selected=hex&oid=20060501/11477916927210&lang=EN

Muitakin uhkia rootkitista:

In simple words, Virtual-machine based rootkit (VMBR) is a new type of malicious software that gains qualitatively more control over a system. It is a piece of malware used to control a server or desktop remotely, placed into a new virtual machine in the VMM or as a secondary virtual machine. The virtual machine is totally oblivious of this activity. It is, in effect, isolated from the virtual machine but can continue it’s malicious activities.

The research group used the prototype rootkits to develop four malicious services -— a phishing Web server, a keystroke logger, a service that scans the target file system for sensitive information and a defense counter measure to defeat existing VM-detection systems.

The researchers also used the VM-based rootkits to control the way the target reboots. The malware could also be used to emulate system shutdowns and system sleep states.

Once installed, VMBR can use a separate attack operating system to deploy malware that is invisible from the perspective of the target operating system. As once the target operating system is hoisted into a virtual machine, the rootkit becomes impossible to detect because its state cannot be accessed by security software running in the target system

http://economictimes.indiatimes.com/articleshow/1526312.cms

Tulevaisuus:

Rootkits To Mask Most Malware By 2008

Most users first became aware of them much more recently; in late 2005, news broke that Sony BMG Music was using a rootkit to hide anti-piracy protection on audio CDs played on PCs.

http://www.techweb.com/wire/security/186500795