Climenole
August 28th, 2007, 08:12 PM
Hi All :)
I guess everybodies remember the discovery by Mark Russinovich of a RootKit with SONY DRM
According to the F-Secure blog there's an other SONY's RootKit now in USB keys:
" Many of our regular readers will remember the huge Sony BMG XCP DRM rootkit debacle of 2005. Back then malware with rootkits were not very common but since then a lot of malware families have adopted rootkit cloaking techniques. It is unclear if the "rise of the rootkit" would have happened in this magnitude without the publicity of the Sony BMG case. In any case, a lot more people now know what a "rootkit" is than back then.
This USB stick with rootkit-like behavior is closely related to the Sony BMG case. First of all, it is another case where rootkit-like cloaking is ill advisedly used in commercial software. Also, the USB sticks we ordered are products of the same company — Sony Corporation. "
Full story :
Double Whammy! Another Sony Case (And it's Not BioShock) (http://www.f-secure.com/weblog/archives/archive-082007.html#00001263)
:)
I guess everybodies remember the discovery by Mark Russinovich of a RootKit with SONY DRM
According to the F-Secure blog there's an other SONY's RootKit now in USB keys:
" Many of our regular readers will remember the huge Sony BMG XCP DRM rootkit debacle of 2005. Back then malware with rootkits were not very common but since then a lot of malware families have adopted rootkit cloaking techniques. It is unclear if the "rise of the rootkit" would have happened in this magnitude without the publicity of the Sony BMG case. In any case, a lot more people now know what a "rootkit" is than back then.
This USB stick with rootkit-like behavior is closely related to the Sony BMG case. First of all, it is another case where rootkit-like cloaking is ill advisedly used in commercial software. Also, the USB sticks we ordered are products of the same company — Sony Corporation. "
Full story :
Double Whammy! Another Sony Case (And it's Not BioShock) (http://www.f-secure.com/weblog/archives/archive-082007.html#00001263)
:)