Feeds

Video Trojan hoax scares up publicity for security firm

Another ambitious start-up banging another empty drum

  • alert
  • submit to reddit

Remote control for virtualized desktops

Updated It sounded so very exciting on Friday: a relatively unknown computer security firm called Network Security Technologies (NETSEC) was rushing to meet with the FBI to discuss a devastating new Trojan they had discovered joined to an .avi video file.

The Trojan, they said, was capable of infecting personal computers and commandeering them to attack Web sites, resurrecting shades of the media frenzy surrounding February's DDoS attacks.

Clearly, NETSEC had struck gold.

Yet on Saturday, the FBI's National Infrastructure Protection Centre (NIPC) Web site remains strangely devoid of any mention of this impending calamity, as does the Carnegie Mellon University Computer Emergency Response Team (CERT) site.

Apparently, the wire services had got a few things wrong on Friday, no doubt with NETSEC's gentle encouragement.

We now know that the video Trojan, which NETSEC dubbed 'Serbian Badman' (ooohh, how scary that sounds), is actually known by the tragically prosaic name 'Downloader' (aka Backdoor.ldr; Downloader.Kit; Trojan.Win32.Loder.WPW; W95/Loader; and WWWPW).

It works by fetching, downloading and silently running another, and quite familiar, Trojan called 'Sub7', which consists of a remote server enabling a third party to control an infected computer.

We are terribly disappointed to report that the Sub7 server is not capable of launching DDoS attacks, unless it has been updated radically since the last time we, em, 'evaluated' it.

Meanwhile, Network Associates' McAfee site has condescended to run some information on NETSEC's sensational new discovery, but what they have to say sounds painfully familiar.

The Downloader Trojan "downloads another Trojan from the Internet and runs it silently. The downloaded Trojan is identified as 'BackDoor-G2'" [aka Sub7].

"NETSEC alerted the Internet community about BackDoor-G2 by calling it 'Serbian Badman Trojan (TSB Trojan)'. News stories suggest that the controlling Trojan which is downloaded is a new threat -- it is not. Although the Trojan known as "Downloader" is new, the file downloaded is a known Trojan."

In other words, NETSEC's discovery amounts to nothing more than a publicity stunt by an opportunistic security firm in quest of free advertising in the form of media attention.

The Register is shocked....shocked....to learn that media manipulation is going on. ®

Previous coverage

Movie clip Trojan to be used in DDoS-style attack

Intelligent flash storage arrays

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Big Content outs piracy hotbeds: São Paulo, Beijing ... TORONTO?
MPAA calls Canadians a bunch of bootlegging movie thieves
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Verizon bankrolls tech news site, bans tech's biggest stories
No agenda here. Just don't ever mention Net neutrality or spying, ok?
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
Simplify SSL certificate management across the enterprise
Simple steps to take control of SSL across the enterprise, and recommendations for a management platform for full visibility and single-point of control for these Certificates.