The Register® — Biting the hand that feeds IT

Feeds

Open source blamed for malware development

Sauce for the goose

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Malware authors are adopting open source development models to develop more potent threats. It's well known among security experts that botnet clients such as SDBot are written in a modular framework that allows hackers to add features that, for example, facilitate its spread through IM networks or add more potent attack features.

But open source development models are also playing a role in Windows rootkit development, according to a recently published study by net security firm McAfee. It says that open source principles, as practiced in the malware-writing community, are affecting the evolution of threats a phenomenon it describes as "good intentions gone awry".

The first edition of McAfee's Global Threat Report also looks at how the introduction of financial incentives to malware development has spawned more potent spyware and Trojan threats.

McAfee has a strong case when it argues that the chance to make money has fostered "more professional" malware development. However, it is on rockier ground with its contention that open source development is increasing the potency of malware threats. Aside from the obvious point that malware remains a largely Windows-only phenomenon, improved education or better software development tools could be just as much to blame.

Since McAfee didn't blame Visual Basic for the creation of Visual Basic threats, such as the infamous Anna Kournikova worm, it's hardly in the position to point the finger at open source development models.

But that's our take. Readers are invited to make up their own mind by reviewing McAfee's Global Threat Report themselves, which is available here (registration required). ®

Agentless Backup is Not a Myth

More from The Register

 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
Flash flaw potentially makes every webcam or laptop a PEEPHOLE
But it's a Google problem - Chrome only, insists Adobe
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving
Panda-peddlers cuffed for chess gambling gambit
More porridge on the menu for Chinese coders after second offence