Gozi - the rootkit/trojan you will love to hate - Identity theft as a service?!?!

Certifications

RSS

Last web search to here

xsx
fepclient msi uninstall
what is the cbs log
kb982867
kernelex
cbs logs what is
xsx alpha blended cursors
xsx alpha blended cursors
xsx alpha blended cursors

Thursday, March 22. 2007

Gozi - the rootkit/trojan you will love to hate - Identity theft as a service?!?!

This is quite an amazing little Trojan that SecureWorks has written up an excellent document about. Not only does it evade detection very well, it has a "business model" so to speak.

This is exactly the reason why you need to browse the internet as an unprivileged user. I'm not talking about third world countries, but reduced system rights.

Read the article here.

Posted by Aaron Tiensivu in Security (MS) at 20:20 | Comments (3) | Trackbacks (0)

4021 hits

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

I don't disagree on browsing as an unpriveleged user, but not using Internet Explorer would seem to be an obvious, short-term fix.

#1 Carl on 2007-03-23 12:16 (Reply)

Now that Windows Update is "built into" Vista, 99.9999% of the time, I never run Internet Explorer.

I am also "extra paranoid" in that when I use Firefox, I run it with NoScript and a bunch of other "internet condoms".

#1.1 Aaron Tiensivu (Homepage) on 2007-03-23 13:47 (Reply)

Seems like a good plan.

#2 Carl on 2007-03-23 16:35 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	E-Mail addresses will not be displayed and will only be used for E-Mail notifications. Standard emoticons like :-) and ;-) are converted to images.
	Remember Information? Subscribe to this entry
Submitted comments will be subject to moderation before being displayed.