Slashdot Mirror

← Back to Stories (view on slashdot.org)

Storm Worm Evolves To Use Tor

Posted by CmdrTaco on from the guess-who's-back dept.

An anonymous reader writes "Seems like the Storm botnet that was behind the last two waves of attacks is also responsible for this new kind of social-engineering based attacks, using spam to try and convince users of the necessity of using Tor for there communications. They 'kindly' provide a link to download a trojaned version of Tor. This blog entry has a link to the original post on or-talk mailing list which has some samples of the messages."

14 of 182 comments (clear)

  1. Re:Are we late to the party? by VGPowerlord · · Score: 4, Funny

    I'm still not sure why people would actually listen to that. I mean... why would anyone just download a random program from a website without looking up said program in, say, google to see what it actually does?

    --
    GLaDOS for President 2016! "Well here we are again. It's always such a pleasure." -- GLaDOS, 2011
  2. Re:Ummm. by Colin+Smith · · Score: 4, Funny

    Seems a lot more advanced than most of the usual spam/bot/virus stuff I read about. You mean... More intelligently designed?

    --
    Deleted
  3. Unlikely by Anonymous Coward · · Score: 5, Funny

    Yeah, if people would do crazy shit like that then we'd have botnets consisting of billions of computers... oh wait.

  4. When your users are illiterate ... by DrSkwid · · Score: 2, Funny

    it is easier to infiltrate there[sic] communications.

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    1. Re:When your users are illiterate ... by DrSkwid · · Score: 3, Funny

      are you su're ?

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  5. Re:Are we late to the party? by maxwell+demon · · Score: 2, Funny

    I'm still not sure why people would actually listen to that. I mean... why would anyone just download a random program from a website without looking up said program in, say, google to see what it actually does? That's easy to solve. Just add a helpful comment to the mail saying:

    If you are not sure if you should install this program, get more information at http://www.evil.org/malware/installer.exe!
    --
    The Tao of math: The numbers you can count are not the real numbers.
  6. Re:Who are the stormbot people? by Colin+Smith · · Score: 2, Funny

    Damnit. The bad guys get all the best software!

    --
    Deleted
  7. time traveller from 1987 goes 20 years in future, by circletimessquare · · Score: 2, Funny

    gets a sneak peek at Slashdot headlines:

    "hmmm, what is going on in the far off fantastical future of 2007?"

    Bringing Science and Math Into Writing?

    "Ah, an age old problem"

    Libraries Defend Open Access

    "Some sort of Fahrenheit 451 situation? has the government gone fascist? or the russians won the cold war?"

    New Legislation Proposed For Nuclear Safety

    "Ah! Chernobyl is still fresh in their minds! At least it seems we didn't nuke each other"

    Storm Worm Evolves to Use Tor

    "SWEET JESUS! DUNE IS REAL!? AND IN CAHOOTS WITH THE SCANDINAVIAN GODS? WHATR SORT OF SCIFI FANTASY FUTURE IS THIS!"

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  8. Need editors who EDIT by The+Monster · · Score: 4, Funny
    Arguably, what is needed is the low-tech sort of spell-checker. Before we had automated computer programs, newspapers had people called 'copy editors' who would proofread the articles submitted by the reporters. They were looking not only for spelling, grammar, and usage problems, but they also would do fact-checking.

    Perhaps we could make the distinction clear this way: A machine that sells soft drinks is often referred to as a 'vender', while the guy selling hot dogs is more likely to be called a 'vendor'. With that in mind, I have toyed with a similar convention for other verb+er nouns:

    The person who checks spelling could be a spell-checkor, and the computer program would remain the spell-checker; the human surfing the Web would be a browsor, using a browser program. Programs such as vi or emacs would be editers....
    It's got as good a chance of adoption as *bibyte does.

    Now, if Cmdr Taco could just get editors who actually EDIT... Oh. He's the 'editor' who ran this story? Never mind.

    --

    [100% ISO 646 Compliant]
    SVM, ERGO MONSTRO.

  9. Um... excuse you? by Linkiroth · · Score: 4, Funny

    Your link didn't work.

  10. Real programmers don't need source code. by sowth · · Score: 2, Funny

    Oh come on! You aren't a real programmer. Everyone knows the binary is the source code. My uncle eddy doesn't even need those fancy disassemblers or debuggers. He edits memory by looking at LEDs and flipping dip switches. Now that is a real programmer.

  11. Note to world: computer programs don't evolve by gatkinso · · Score: 2, Funny

    Human beings modify them, fix bugs, and upgrade them. Be it a computer virus, spreadsheet, or operating system.

    Sometimes they intentionally break them.

    But they don't spontaneously "evolve", "mutate", or any other such thing.

    Christ.

    --
    I am very small, utmostly microscopic.
  12. Re:My question is.. by Anonymous Coward · · Score: 1, Funny

    Your plan needs 20% more buzzwords to become truly plausible. I mean, you got in "crack the code", and "inject", and even "vectors", but I'm gonna need at least a "mainframe" and a "protocols" before I subscribe to your newsletter.

  13. Re:Are we late to the party? by Heembo · · Score: 2, Funny

    LAUGH. A technique like this was effective in getting 60% of a section of IRS employees to give up their password. When I brought this up to my dad (who works there) his answer was, why, you want mine? here it is....

    --
    Horns are really just a broken halo.