Rootkit Creators Turn Professional
pete richards writes "Signalling a trend towards increased 'outsourcing' of some elements of malware creation, worm authors are increasingly turning to commercially available rootkits to help their creations slip past virus detection engines. Those root kits in the mean time are becoming more professional. Antivirus vendor F-Secure reported last week that it had detected a first rootkit designed to bypass detection by most of the modern rootkit detection engines."
Or we could all just switch to Linux, BSD and OSX, which is not going to happen.
Psssst, look here.
Windows is like decaf - it tastes like the real thing, but it won't get you through the day.
MOD PARENT DOWN. It's not talking about rootkits. Rootkits are *tools for keeping access after having broken into a computer, including hiding said access from the real computer owner*. VNC is not a rootkit. SSH bugs are not rootkits. Etc.
I can see legitimate uses - beyond research - for exploits (updates, regaining lost access, evaluating real threat leves.) The only legitimate use I can see for a rootkit is during research of how to detect rootkits. This (and liberty) may be enough for it to be relevant to keep development free, of course - yet it's significantly different from exploits.
Eivind.