Slashdot Mirror
Custom Trojan Creation Tool Sold Online
Finch writes "Net Security.org is reporting on the surprisingly sophisticated 'virus in a can' software called Pinch. Pinch is a tool sold on several online forums and designed to create Trojans. It allows attackers to specify the data that Trojans steal. One of the interface tabs, PWD, allows malicious users to select the type of password to be stolen by the Trojan: from email passwords to passwords kept by the system tools. It is possible to order the Trojan to encrypt this data when sending it, so that nobody else can read it. 'Pinch also lets users carry out other actions: turn infected computers into zombie computers, pack Trojans to make detection more difficult, and kill certain system processes, particularly those of security solutions.'"
Yes, but does it run on Linux?
How much is it and where can I buy it? For, uh, research purposes.
they were distributing trojans like this in the 1990s... sub7 anyone? ;)
rm -rf
There is nothing new here.
I remember back in my script kiddie days I was able to download programs that would put together a trojan or virus together from the various options the user selected. Press a button and viola! It generated an executable. This was ten years ago.
What's so new here? That fact that someone is commercializing it?
Well, good. If you have to shell out cash at least it will keep my 16 year old self from downloading it and causing annoyances.
Love sees no species.
If anybody tries to install a trojan on my computer, I'll hit them back.
With Winnuke95.
"1NCRE@SE Y0UR PEN1S S1ZE 25% 1N 2 WEEKS!" programs I definitely need custom Trojans.
thegodmovie.com - watch it
http://vx.netlux.org/vx.php?id=tv03
I still remember the password was chiba city.
anyone who would use one of these would likely download a pirated version.
A great slogan for this program, but I bet our latex buddies have an entirely different interpretation of that...
Somewhere between a super nerd and a rock star...
I'm going to design mine with the ribs on the inside! For my pleasure! Aww yeah!
I'm trying to teach myself to set people on fire with my mind... Is it hot in here?
I wonder who actually pays for these tools? Seems like such a tool would be freely downloadable after teh first purchase. I mean, it isn't like the author is going to try to sue you or anything (though maybe he'll DDoS your download site). It would be like a drug dealer calling the cops because someone stole his supply.
-matthew
"THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
Oh, wait... ;)
Ben Hocking
Need a professional organizer?
Does anyone have a copy of the EULA for that software?
This issue is a bit more complicated than you think.
Eh. Trojans/rootkits/viruses built form these "kits" tend to all be very similar. Essentially, if you defend against one, you're defended against all the others.
Never mind the fact that it's a fucking KIT. If YOU can download it, so can the anti-virus people in order to figure out how to detect viruses made with it.
The interesting thing about modern viruses/trojans/whatever is that very few of them are really *viruses* anymore. They rely almost completely on simply getting a user to manually run (or at least give permission to the system to run) an obfuscated executable. It's sad that the technique is so successful.
This is news? There was a trojan generator, created in Brazil, by the name Senna Spy. It was created in 1999.
and soon BSA campaigns are screaming, You wouldn't steal a trojan creation tool...
Damn, yes I would
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
Oh, actually a search for "pinch" on emule turns up quite a plethora of results... although once you've sorted out the porn and downloaded a few exe files (yes I know, for most geeks this is the exact reverse of the normal process), for some odd reason antivirus warnings start to pop up... apparently two out of three pinch downloads was infected with "Win32/PSW.LdPinch.P4 trojan" and the third with some other crap that I forgot to write down.
You can almost see the scriptkiddies sitting there with their brand new trojan going... "hmm, now if only I had some program to trick people into downloading... something I could merge my trojan with to start off my botfarm. Something I could put on fasttrack, and maybe emule... something idiots would download and run even if their antivirus goes off. Hey wait a minute, I'm an idiot and I just ran pinch even though 'norton' told me it was bad for me!"
it's the first slashvertisment that makes you search for the shop yourself...
Did you stop to think that maybe the construction set was identified as a Trojan because it ... you know ... contained the code for a Trojan? As in ... if it tripped your antivirus then you probably had the right one.
Breakfast served all day!
Either the black-hats or the condom company, but someone has to change the name of their product.
These subject lines are killing me.
If you do what you always did, you get what you always got.
Since I have to take care of a lot of machines of people that get these things, my otherwise non-violent nature would like to find the authors, well, in a Turkish prison. Yes these things have been sold on the net for a long damn time, but I've also had to scrape, reformat, debug, and otherwise keep hapless unwitting people from the damage these things do. They're often chained to using Windows whether they want to or not.
I've seen them spend hundreds of dollars on both prevention and cure, only to get owned again. This isn't about Microsoft, this is about guys that are the seeming equivalent to those that might cut brake lines in a car. The outcome isn't injurious physically, just emotionally/mentally and financially.
My hacker instinct says always continue to hack and explore and try and break things, but selling trojans seems way over the top. No fucking 'let them download Ubuntu or get a second mortgage for a Mac' shit. This is real, this is vulgur, and this is a business plan for bright guys gone bad.... and I don't get paid for scraping this crap.
---- Teach Peace. It's Cheaper Than War.
As much as I despise the concept, I respect the authors of this program. They are putting forth time and effort to create a product that can be used by others. Instead of whining about such a lack of a program on an online forum, or creating a conspiracy as to why such a program doesn't exist, they went out there and made it happen. I've seen and known quite a few people who would have done just the opposite. Instead of going out there and finding and creating a solution for their problems, they instead would opt to blame their personal problems on everyone but themselves. Some even going so far as to draft up elaborate conspiracy theories to explain their own inadequacies. I won't point any fingers, but I've even seen a person exactly like this on Slashdot. Best of luck to the authors of this product. Despite my distaste for what they have created, I have respect for them. Hopefully the "oppressed" in this world will take note, most likely not, though.
needs to have his liver removed with hot pincers.
The higher the technology, the sharper that two-edged sword.
I had to modify the following post to take any direct references as I have no way of knowing if you, personally, actually made use of your exploits outside of your own private testing environment...
I guess that's the difference between real tao programmers and script kiddies.
I _could_ have engaged in the same things that script kiddies did, exploiting other people for personal amusement and/or gain, but made a conscious decision not to. I saw the links, I looked at the downloads, the ftp sites, and the web pages. I _could_ have become involved in that sort of thing.
But, and I guess a significant majority of the population is lacking this little definition in their upbringing, I decided that there were far better uses for my intellectual ability... You know, something productive, something which would benefit people, something which didn't rely on targetting and exploiting others' ignorance.
The actions of script kiddies (and don't take this personally because you're part of the greater population) remind me of taking the lunch money from a quadrapalegic.
What's really sick is that most of them got a real kick out of it--and they're the asshats that I'll have to work next to in the professional world.
the NPG electrode was replaced with carbon blac
You know i was kind of disappointed to see this was about computer viruses, was hoping it was about Trojan the Condoms
He did consider that. His point was that precisely because of what you're saying, people will run a file that's supposed to be Pinch, even if they see a virus warning. Therefore, it would make sense for people who want to create a botfarm to make a virus with Pinch, and then throw it up as a torrent and say it IS pinch. Get it?
Because I find it amusing that they can write these articles and not give any useful information as to what systems are affected buy such a program.
But then I guess most of us already know the answer.
Fiat Homos et Pereat Theos
You can get a free trial here.
Oh, wait...
Any skilled hacker could create their own trojan or malicious software. If a ninth grader can do it in a combination of Perl and MASM, I am sure that any smart person might be able to apply their brains to create anything. Of course, creating these are a waste of time and gain nothing, so...
I'm believing that the future of anti-virus/rootkit solutions has to be a live CD that runs fully independently of the host system and software being scanned.
"It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
No? Then I'll just stick with bo2k. Free, open source, and probably more mature than the advertised program. Thanks for the spam, slashdot.
Write your own Choose Your Own Adventure. http://www.freegameengines.org/gamebook-engine/
It's the per client licenses that kill your budget.
Help stamp out iliturcy.
You seem smart. Nevertheless you're solving the wrong problem. Solve the right problem and it will be ok.
Help stamp out iliturcy.
Well, yes. Hence why I found it amusing that only two out of three downloads (of exactly the same files according to filename and versions and all... except filesize) warned about that particular trojan, which could logically be an indication of it containing the code it will later use. The third occasion warned for another trojan, which means that either that was the correct one, or it was infected with another trojan. Of course they were all infected, as was blatantly obvious hours later when I sandboxed them and tried the program out without antivirus protection.
Unfortunately for cheapskate scriptkiddies, only older versions of pinch is available free through simple means. To get the later version you'll have to cough up or have good connections. Unfortunately for the rest of us, older versions still do the trick... but then that is nothing new, there has been script kiddies with custom virus and trojan kits since the early days of the world wide web, so I don't think this is anything to panic over either.
Although fun to play with. And oh so tempting to bundle it back in itself and share on the mule. With a custom trojan contantly pinging the whitehouse with emails about terrorist threats.
I need custom Trojans because Im just so well endowed.
ahhh.... who am I kidding....??
with ribbing to please the ladies. ;-)
I may not be a smart man, but I know what an inode is.
Virii? YOU honestly believe Bush would know to use the term Virii?
Way to break the mood!
Here's a handy search tip: let's say you want to look for the movie Harry Potter in Shareaza. Reverse the word order so you search for Potter Harry, apply the filter -"Potter Harry" and you'll get the results you're looking for minus all the viruses, spyware, and trojans which (at least presently) use the exact order of what you search for.
Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
Good tip, but if I understand it right it would counter only malware that renames themselves to your search query, and I have yet to encounter any of that on the emule network. I guess it is predominantly on the fasttrack network? Or possibly a tip for those who have a server list infected with fake servers.
Yeah, it seems to be the Gnutella2 network. I just did a search for: havenwar 867124 and here are some of the results:
1.20MB: tUboO @ havenwar 867124 1 (uCF)[x].zip
559KB: Angel havenwar 867124 1 [New Version] Vocal.wma
355KB: [LiveStream] havenwar 867124 1 @256kbps Extended.wma
1.30MB: (CDZ) havenwar 867124 1 (full)(Divx).zip
Status is all green checkmarks with multiple sources, reporting 16 or 24KB/s download speed, and some show a five-star rating.
Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
Considering that "virii" is a made-up, non-English word, then yes, I can believe Bush using it and being mocked in the media the next day for another brilliant Bushism. The proper plural is "viruses".
Hate to be the one who bears bad news. And by the way, "boxen" is not a real word either.
mirrorshades radio -- darkwave, industrial, futurepop, ebm.