Sunday, March 30, 2008

This might be the ultimate irony

Hi folks,

Today we found what might be the ultimate irony... a spyware product where the home page has been hacked, and is installing someone else's rootkit!

The product is one of those spy-on-your-spouse/kids/employees things that says it's stealthy (in other words, _it's_ supposed to be a rootkit itself), and the home page has a chunk of escaped javascript

that calls out to a Neosploit site that's installing a rootkit.

And it's the new Neosploit too.

We're trying to contact the site owner to tell them, but the "contact me" page crashes.

Oh well... we'll keep trying.





Post a Comment

<< Home