Report: Computer hijacking on the rise

By Alorie Gilbert, CNET News.com
Tuesday, July 12, 2005 09:41 AM

Personal computers that play unwitting host to "zombie" code are proliferating at a startling pace, according to a new report.

Incidents involving the malicious code, also known as "bot" code, reached 13,000 from April through June, according to a report from antivirus-software maker McAfee. That's quadruple the number tracked by the company in the previous three months. McAfee estimated that 63 percent more machines were exploited by bot programs and by spyware and adware--their slightly less insidious, but more common, cousins--in the first six months of this year than in the whole of last year.

Computer security experts have identified zombie networks, or networks of systems with bot software installed, as a rising threat to consumers and businesses. The programs spread to vulnerable computers via chat room servers and file-sharing networks, experts said, and often go undetected by the PCs' owners.

Intruders can remotely control a network of infected machines to launch attacks on other computers and Web sites, spread spam and steal data, for example. Like most worms and viruses, zombie programs largely target machines running the Microsoft Windows operating system.

Spyware and adware also implant themselves surreptitiously on the computers of unsuspecting victims. But unlike zombie programs, they are mainly designed to report users' browsing habits and deliver pop-up ads. Such programs have become the scourge of the Internet, often frustrating people's Web experience and tying up their computers' processing power.

Public outcry over such programs has reached lawmakers' ears. Several anti-spyware bills are under review by Congress. The U.S. Federal Trade Commission and its counterparts abroad recently announced that they'd urge Internet Service Providers to crack down on zombie perpetrators. New York Attorney General Eliot Spitzer filed suit against Web marketer Intermix Media in April, charging it with being a source of adware and spyware programs that hinder online commerce and security.

But McAfee remains pessimistic about the fight against what it calls "potentially unwanted programs."

"There are four anti-spyware bills working their way through Congress to help tackle this growing problem, but we believe the problem is only going to get worse," Vincent Gullotto, a McAfee vice president, said Monday in a statement.

McAfee also said it saw a 12 percent increase in the number of new unwanted programs created in the past three months, compared with the previous three months.

The reported number of overall computer security vulnerabilities climbed about 5 percent in the second quarter, compared with the same period last year, exceeding 1,000 on various computing platforms, the company said.

A growing number of attacks are being launched with the goal of financial gain, McAfee noted. Some attackers use programs to steal financial data, while others attempt to hold a person or group ransom by gaining complete control over a machine or network.

McAfee also warned that researchers have discovered a new method for hacking cell phones using the Bluetooth wireless protocol. The technique allows an attacker with special equipment to connect to a Bluetooth handset without authorization.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Use shades of gray to enhance scale in Excel

Microsoft Office Suite

Excel's palette is generous, but don't throw buckets of pigment all over your spreadsheets just because you can.


Read more »



Ultimate 2012 recovery site: the moon

Blog thumbnail

Have you seen the disaster movie "2012"? A friend from Control Risks and I did, and we reluctantly concluded we wouldn't be able to write off the cost of our..... by Nathaniel Forbes

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web