This might be the ultimate irony

Hi folks,

Today we found what might be the ultimate irony... a spyware product where the home page has been hacked, and is installing someone else's rootkit!

The product is one of those spy-on-your-spouse/kids/employees things that says it's stealthy (in other words, _it's_ supposed to be a rootkit itself), and the home page has a chunk of escaped javascript



that calls out to a Neosploit site that's installing a rootkit.




And it's the new Neosploit too.

We're trying to contact the site owner to tell them, but the "contact me" page crashes.



Oh well... we'll keep trying.

Cheers

Roger