Gozi - the rootkit/trojan you will love to hate - Identity theft as a service?!?!

Certifications

RSS

Last web search to here

force installation of .msu
msftncsi.com
Speaker mail
whois msftncsi.com
google xsx mouse cursors
antennae search .com
xsx alpha blended cursors
no add legacy on device manager
xsx alpha blended cursors

Thursday, March 22. 2007

Gozi - the rootkit/trojan you will love to hate - Identity theft as a service?!?!

This is quite an amazing little Trojan that SecureWorks has written up an excellent document about. Not only does it evade detection very well, it has a "business model" so to speak.

This is exactly the reason why you need to browse the internet as an unprivileged user. I'm not talking about third world countries, but reduced system rights.

Read the article here.

Posted by Aaron Tiensivu in Security (MS) at 20:20 | Comments (3) | Trackbacks (0)

4904 hits

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

I don't disagree on browsing as an unpriveleged user, but not using Internet Explorer would seem to be an obvious, short-term fix.

#1 Carl on 2007-03-23 12:16 (Reply)

Now that Windows Update is "built into" Vista, 99.9999% of the time, I never run Internet Explorer.

I am also "extra paranoid" in that when I use Firefox, I run it with NoScript and a bunch of other "internet condoms".

#1.1 Aaron Tiensivu (Homepage) on 2007-03-23 13:47 (Reply)

Seems like a good plan.

#2 Carl on 2007-03-23 16:35 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	E-Mail addresses will not be displayed and will only be used for E-Mail notifications. Standard emoticons like :-) and ;-) are converted to images.
	Remember Information? Subscribe to this entry
Submitted comments will be subject to moderation before being displayed.