Feeds

FBI surveillance bonanza in BadTrans.B worm

Millions of passwords in those mail dumps

  • alert
  • submit to reddit

Beginner's guide to SSL certificates

Millions of Outlook and Outlook Express users have been infected by the BadTrans.B worm, which logs keystrokes in every open window and periodically sends the log files to one of several e-mail dumps, presumably for later retrieval by nosey hackers.

Or Feds. According to a story from Rotten.com, an ISP which hosts one of the e-mail dumps, MonkeyBrains, has received a request from the FBI to turn over all the relevant log files.

MonkeyBrains has instead turned the tables on the FBI by making part of the database available to everyone on their Web site here.

If the story is true, then the FBI's intention is clear. They plan to assemble the data and grep for various key words and names in hopes of stumbling upon the passphrases of known and suspected evildoers. It's Magic Lantern on steroids, and yet it's just a dumb accident -- but one which could dump an absolute mother lode of otherwise forbidden data in the Feds' laps.

While it's inconceivable that the FBI could get a search warrant for such a giant bonanza, there's nothing in the law which prevents the ISPs concerned from turning over the spoils voluntarily.

At press time, MonkeyBrains claimed to have logged 5,857,277 BadTrans messages; and they host only one of a score of dumps.

We've been unable to confirm the story due to temporal difficulties; but we will be checking with DoJ flacks, MonkeyBrains and several other ISPs believed to be hosting BadTrans mail dumps. We'll post a follow-up to this intriguing story as soon as we get the straight dope. ®

Related Story

BadTrans virus bites Windows users hard

Remote control for virtualized desktops

More from The Register

next story
MI6 oversight report on Lee Rigby murder: US web giants offer 'safe haven for TERRORISM'
PM urged to 'prioritise issue' after Facebook hindsight find
I'll be back (and forward): Hollywood's time travel tribulations
Quick, call the Time Cops to sort out this paradox!
Assange™ slumps back on Ecuador's sofa after detention appeal binned
Swedish court rules there's 'great risk' WikiLeaker will dodge prosecution
NSA mass spying reform KILLED by US Senators
Democrats needed just TWO more votes to keep alive bill reining in some surveillance
prev story

Whitepapers

Designing and building an open ITOA architecture
Learn about a new IT data taxonomy defined by the four data sources of IT visibility: wire, machine, agent, and synthetic data sets.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.