Gozi - the rootkit/trojan you will love to hate - Identity theft as a service?!?!

Certifications

RSS

Last web search to here

ip alias suse
force install msu
xsx alpha blended cursors
msftncsi
what is cbs.log
force msu install
xsx alpha blended cursors
xsx alpha blended cursors
xsx alpha blended cursors
reinstall msu

Thursday, March 22. 2007

Gozi - the rootkit/trojan you will love to hate - Identity theft as a service?!?!

This is quite an amazing little Trojan that SecureWorks has written up an excellent document about. Not only does it evade detection very well, it has a "business model" so to speak.

This is exactly the reason why you need to browse the internet as an unprivileged user. I'm not talking about third world countries, but reduced system rights.

Read the article here.

Posted by Aaron Tiensivu in Security (MS) at 20:20 | Comments (3) | Trackbacks (0)

3747 hits

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

I don't disagree on browsing as an unpriveleged user, but not using Internet Explorer would seem to be an obvious, short-term fix.

#1 Carl on 2007-03-23 12:16 (Reply)

Now that Windows Update is "built into" Vista, 99.9999% of the time, I never run Internet Explorer.

I am also "extra paranoid" in that when I use Firefox, I run it with NoScript and a bunch of other "internet condoms".

#1.1 Aaron Tiensivu (Homepage) on 2007-03-23 13:47 (Reply)

Seems like a good plan.

#2 Carl on 2007-03-23 16:35 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	E-Mail addresses will not be displayed and will only be used for E-Mail notifications. Standard emoticons like :-) and ;-) are converted to images.
	Remember Information? Subscribe to this entry
Submitted comments will be subject to moderation before being displayed.