Slashdot Mirror


Tigger.A Trojan Quietly Steals Stock Traders' Data

**$tarDu$t** recommends a Washington Post Security Fix blog post dissecting the Tigger.A trojan, which has been keeping a low profile while exploiting the MS08-66 vulnerability to steal data quietly from online stock brokerages and their customers. An estimated quarter million victims have been infected. The trojan uses a key code to extract its rootkit on host systems that is almost identical to the key used by the Srizbi botnet. The rootkit loads even in Safe Mode. "Among the unusually short list of institutions specifically targeted by Tigger are E-Trade, ING Direct ShareBuilder, Vanguard, Options XPress, TD Ameritrade, and Scottrade. ... Tigger removes a long list of other malicious software titles, including the malware most commonly associated with Antivirus 2009 and other rogue security software titles ... this is most likely done because the in-your-face 'hey, your-computer-is-infected-go-buy-our-software!' type alerts generated by such programs just might ... lead to all invaders getting booted from the host PC."

212 comments

  1. looks like it may be by bugs2squash · · Score: 5, Funny

    more effective that the antivirus I use today

    --
    Nullius in verba
    1. Re:looks like it may be by Anonymous Coward · · Score: 4, Funny

      And much, much more effective than your English class.

    2. Re:looks like it may be by amclay · · Score: 3, Insightful

      Probably not. Tigger removes adware/spyware, and not all spyware even then. Viruses are different than your typical spyware. There's a whole host of things that are different than spyware that I'm not going to clarify, but don't go around thinking Tigger is some sort of anti-virus because it's not.

      --
      It's all fun and games till someone divides by 0. Then it's hilarious.
    3. Re:looks like it may be by cbiltcliffe · · Score: 3, Insightful

      Woooooooosh.

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    4. Re:looks like it may be by transporter_ii · · Score: 3, Funny

      You use Antivirus 2009, too? Cool.

      --
      Doctors destroy health, lawyers destroy justice, universities destroy knowledge, religion destroys spirituality
    5. Re:looks like it may be by dloseke · · Score: 1

      I've switched over to the new Antivirus 360....

    6. Re:looks like it may be by hesaigo999ca · · Score: 1

      Where can I download it, do you have a website, I seem to be running all sorts of malware,
      this might get me free of all those, then I will never go on stock websites again, so problem solved!

    7. Re:looks like it may be by Anonymous Coward · · Score: 0

      Seriously? +4 Funny for grammar? You Sir, AC, deserve a stfuppercut.

  2. Oblig... by 8127972 · · Score: 5, Funny

    Does it make your computer bounce up and down on its tail too?

    --
    This is my opinion. To make sure you don't steal it, it's covered by the DMCA.
    1. Re:Oblig... by cbiltcliffe · · Score: 4, Insightful

      The wonderful thing about tiggers
      Is tiggers are wonderful things!
      Their tops are made out of rubber
      Their bottoms are made out of springs!
      They're bouncy, trouncy, flouncy, pouncy
      Fun, fun, fun, fun, fun!
      But the most wonderful thing about tiggers is.....
      I'm the only one

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    2. Re:Oblig... by Serenissima · · Score: 4, Funny

      But the most wonderful thing about tiggers is.....
      I'm the only one


      Hmmmmm... considering that it removes a long list of other malware, that's surprisingly accurate.

      --
      Give a man a fire and he'll be warm for a day. But light a man on fire and he'll be warm for the rest of his life.
    3. Re:Oblig... by Anonymous Coward · · Score: 0

      Only on /. does this get modded informative.

  3. a quarter million !!! by bugs2squash · · Score: 5, Funny

    I though the most wonderful thing about Tiggers was that there was only one of them

    --
    Nullius in verba
    1. Re:a quarter million !!! by jollyreaper · · Score: 4, Funny

      I though the most wonderful thing about Tiggers was that there was only one of them

      It's a very large quantity of one.

      --
      Kwisatz Haderach
      Sell the spice to CHOAM
      This Mahdi took Shaddam's Throne
    2. Re:a quarter million !!! by girlintraining · · Score: 5, Funny

      I though the most wonderful thing about Tiggers was that there was only one of them

      There are many copies. And they have a plan.

      --
      #fuckbeta #iamslashdot #dicemustdie
    3. Re:a quarter million !!! by homesnatch · · Score: 1

      It is the BORG!

    4. Re:a quarter million !!! by Daimanta · · Score: 1

      lim(n->250000) 1 is the correct expression

      --
      Knowledge is power. Knowledge shared is power lost.
    5. Re:a quarter million !!! by Anonymous Coward · · Score: 2, Funny

      Their stocks are made out of rubber
      Their brokers are made out of springs!
      They're bouncy, trouncy, flouncy, pouncy
      Fun, fun, fun, fun, fun!

    6. Re:a quarter million !!! by Anonymous Coward · · Score: 0

      Only on your computer is there only one.

    7. Re:a quarter million !!! by flyingfsck · · Score: 1

      That is just too deep for a bear of very little brain.

      --
      Excuse me, but please get off my Pennisetum Clandestinum, eh!
    8. Re:a quarter million !!! by WhiteDragon · · Score: 1

      There are many copies. And they have a plan.

      yes, but they formerly had a Plan.

      --
      Did you mount a military-grade, variable-focus MASER on an unlicensed artificial intelligence?
    9. Re:a quarter million !!! by badkarmadayaccount · · Score: 1

      9?

      --
      I know tobacco is bad for you, so I smoke weed with crack.
  4. Here's the sum total of the knowledge gained... by Anonymous Coward · · Score: 4, Funny

    Stocks are going down. Don't buy stock.

    1. Re:Here's the sum total of the knowledge gained... by PCM2 · · Score: 4, Insightful

      Of course not. You should wait until they're at their 10-year peak and then buy them.

      --
      Breakfast served all day!
    2. Re:Here's the sum total of the knowledge gained... by PIBM · · Score: 2, Interesting

      No, just wait until it tells you it hit rock bottom...

      Can that happen ?

    3. Re:Here's the sum total of the knowledge gained... by Camann · · Score: 1

      If you pay attention carefully, at this point it will start to dig.

      --
      I can't believe you don't know what a Hasemalphaginnojinglanaporphomism is.
    4. Re:Here's the sum total of the knowledge gained... by Cytotoxic · · Score: 3, Funny

      Of course not. You should wait until they're at their 10-year peak and then buy them.

      Hey, that's my investment strategy! So far it isn't working out so well, but I'm starting a website "ShortMyPortfolio.com". If past performance is any indication, it should be the best investment advice available at any price.

    5. Re:Here's the sum total of the knowledge gained... by zach297 · · Score: 2, Insightful

      You can't tell something is peaking until after it goes down.

    6. Re:Here's the sum total of the knowledge gained... by legirons · · Score: 1

      You can't tell something is peaking until after it goes down.

      challenge: predict mid-day

    7. Re:Here's the sum total of the knowledge gained... by Anonymous Coward · · Score: 0

      Wooosh.

    8. Re:Here's the sum total of the knowledge gained... by isBandGeek() · · Score: 2, Insightful

      Or rather, short sell them.

    9. Re:Here's the sum total of the knowledge gained... by Cheech+Wizard · · Score: 1

      Stocks are going down. Don't buy stock.

      Not to worry. Most investors have lost so much they don't have money to invest whether stocks go up or down.

    10. Re:Here's the sum total of the knowledge gained... by ozphx · · Score: 1

      Sir, my bank is happy to lend you $14 million against your home. No SSN required.

      --
      3laws: No freebies, no backsies, GTFO.
    11. Re:Here's the sum total of the knowledge gained... by cerberusss · · Score: 1

      You can't tell something is peaking until after it goes down.

      And even then it can be a local maximum.

      --
      8 of 13 people found this answer helpful. Did you?
    12. Re:Here's the sum total of the knowledge gained... by SynthaxError · · Score: 1

      Stocks are going down. Don't buy stock.

      But the oceans are going up. Buy water!

      --
      "There is no dark side of the moon really. Matter of fact it's all dark."
    13. Re:Here's the sum total of the knowledge gained... by zoefff · · Score: 1

      But you can say that something is close to peaking and get out.

  5. Hmm... by Mysticalfruit · · Score: 1

    So basically somebody needs to take out that whole "stealing your data" part from this worm and re-release it back into the wild and it would be a good thing?

    --
    Yes Francis, the world has gone crazy.
    1. Re:Hmm... by Camann · · Score: 1

      Other than the fact that it's still illegal and would leave its rootkit on your machine, sure. *famous last words* What could go wrong?

      --
      I can't believe you don't know what a Hasemalphaginnojinglanaporphomism is.
    2. Re:Hmm... by interiot · · Score: 4, Interesting

      Benevolent worms are a perennial suggestion in computer security, and the conclusion is always no no no no.

    3. Re:Hmm... by Anonymous Coward · · Score: 0

      I don't do stock trading, Tigger is my favorite antivirus now

    4. Re:Hmm... by Devout_IPUite · · Score: 1

      Benevolent worms would have to be better than malicious ones. I mean, seriously. Benevolent worms might trash someone's life's work, but in that same time it's going to save a few other people's life's work.

    5. Re:Hmm... by Chabo · · Score: 1

      Yeah, but I don't trade stocks, so I'll start using it now. I mean, nuclear secrets look nothing like stock information, right?

      --
      Convert FLACs to a portable format with FlacSquisher
    6. Re:Hmm... by oldspewey · · Score: 3, Funny

      I'm okay with this worm stealing data so long as it put a little more effort into it: you know, it could introduce itself as Prince Leta Matobo living in exile in Ghana, spend some time building up a rapport, and then start making suggestions about making billions of dollars using 100% guaranteed modalities.

      This automated stealing of data is just bullshit.

      --
      If libertarians are so opposed to effective government, why don't they all move to Somalia?
    7. Re:Hmm... by SmurfButcher+Bob · · Score: 3, Insightful

      It's only illegal if your name isn't SONY or BMG. If your name IS SONY or BMG, you simply need to deposit two iTunes songs on the machine, and you're held harmless.

      --

      help me i've cloned myself and can't remember which one I am

    8. Re:Hmm... by Abreu · · Score: 2, Interesting

      "If you must have crime, at least it should be organized crime..."
      Attributed to the Patrician of Ankh-Morpork

      --
      No sig for the moment.
    9. Re:Hmm... by ColdWetDog · · Score: 1

      "If you must have crime, at least it should be organized crime..."

      That's what governments are for. At least for fairly low values of "organized".

      --
      Faster! Faster! Faster would be better!
    10. Re:Hmm... by shutdown+-p+now · · Score: 1

      This automated stealing of data is just bullshit.

      Because it steals work from the Nigerian princes and prime ministers?

    11. Re:Hmm... by Nikker · · Score: 1

      You must be from the DoD.

      --
      A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
  6. The real question is... by dov_0 · · Score: 3, Funny

    ..does it run on Linux?

    --
    sudo mount --milk --sugar /cup/tea /mouth /etc/init.d/relax start
    1. Re:The real question is... by Nikker · · Score: 1

      Trust me if you were smart enough to do something like that you would know where to look ;)

      --
      A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
  7. sourcing the problem by girlintraining · · Score: 2, Informative

    Attacks like this, namely single vector and single target, point to a single person or small number of persons who have found some way of using the data to profit themselves. We're probably looking at someone in their late 20s, based in the United States(cursory examination -- appears the institutions are all english and based in the US), upper middle class, 5-7 years experience programming (self-explanatory), single, male, and with a history of mental health disorders along axis IV, socially under-developed, (the two are usually related, and most white-collar criminals have mental health disorders but are still highly intelligent) and likely recently became unemployed and is trying to maintain his upper-middle class income.

    Forget tracing back through the network -- find out where the money is going. You have a many-to-one relationship, it's unlikely this guy is smart enough to launder money effectively -- the entire attack scenario points to someone new and inexperienced, and is acting alone hoping this will reduce his risk exposure. The differential is the profile above -- find someone who was recently in debt, and is now very much out of debt.

    Have fun.

    --
    #fuckbeta #iamslashdot #dicemustdie
    1. Re:sourcing the problem by oldspewey · · Score: 5, Funny

      find someone who was recently in debt, and is now very much out of debt

      Agreed, let's go after the bailout recipients.

      --
      If libertarians are so opposed to effective government, why don't they all move to Somalia?
    2. Re:sourcing the problem by Mysticalfruit · · Score: 1

      Considering the thousands of highly skilled programmers who are now out of a job and who also probably worked on financial systems and who also have a very detailed understanding of the Win32 subsystems, I'm not surprised.

      --
      Yes Francis, the world has gone crazy.
    3. Re:sourcing the problem by girlintraining · · Score: 2, Interesting

      Agreed, let's go after the bailout recipients.

      No. It should be assumed this person has familiarity with those systems, in order to develop the code. Acting alone (highly probable), that means he likely has/had accounts with many if not all of those financial service providers. That grossly limits the number of available suspects. His industry and age also narrow the list even further. That probably leaves perhaps 10k worth of potential suspects in the pool. I'd be guessing, but he probably hopes to convert the stolen accounts stocks to cash, launder it through a third party (paypal perhaps), and then return those assets as stock purchases to avoid taxation, which means you only need the cooperation of a few of those providers and demographic data. Link it with possible terrorism to bypass the usual rules that would prevent a dragnet, and chances are good you find your man. At least, that's how I'd investigate.

      --
      #fuckbeta #iamslashdot #dicemustdie
    4. Re:sourcing the problem by olddotter · · Score: 1

      Yea, because international criminals don't think "I'd like part of that $17 Trillion market in the US. I figure a good bit of online fraud is international organized crime. Is that wrong?

    5. Re:sourcing the problem by johnsonav · · Score: 5, Informative

      Forget tracing back through the network -- find out where the money is going. You have a many-to-one relationship, it's unlikely this guy is smart enough to launder money effectively -- the entire attack scenario points to someone new and inexperienced, and is acting alone hoping this will reduce his risk exposure.

      I would imagine the guy who wrote this isn't working alone. Most of these kinds of attacks aren't meant to directly transfer money from the victim's brokerage account to an account controlled by the attacker.

      They use the hijacked accounts to purchase large quantities of a low-volume penny stock. The attacker, or the group he works for, already have a large position in that stock. The huge increase in demand pushes the price for the stock up. This causes all kinds of people to sell--including the attacker. And they make a tidy profit, while the victims are left with a large quantity of over-priced stock.

      The hard part about catching the perpetrators is sifting through the list of all the people who sold the stock at the inflated prices. A bunch of people make money from a scam like this, but only one is the criminal.

      --
      ... and that's when the C.H.U.D.'s came at me.
    6. Re:sourcing the problem by LoyalOpposition · · Score: 1

      Nice profile, but I was disabused of the reliability of profiles by Lee Boyd Malvo and John Allen Muhammad.

      -Loyal

      --
      I aim to misbehave.
    7. Re:sourcing the problem by AbbyNormal · · Score: 1

      "find someone who was recently in debt, and is now very much out of debt."

        You mean like most US companies that just got bailed out by the government?

        Good luck with that.

      --
      Sig it.
    8. Re:sourcing the problem by greymond · · Score: 2, Insightful

      Someone likes their CSI

    9. Re:sourcing the problem by NeutronCowboy · · Score: 4, Insightful

      Err, no. You might have the most likely demographic right, but that's just because they contain the majority of crackers. As for the debt, it is very unlikely someone in that demographic managed to accumulate a lot of debt.

      What I'm pretty sure you got completely wrong is the acting alone part. You do not profit of this kind of targeted scheme by working alone. You either have a taskmaster who requested this info, or you know the people who will be able to profit from this info.

      Really, nice try, but I'm pretty sure you have no idea who the crackers really are, and how they operate. I don't know em personally either, but I've got enough experience with DSM and psychological profiling to call shenanigans on your assessment.

      --
      Those who can, do. Those who can't, sue.
    10. Re:sourcing the problem by commodoresloat · · Score: 5, Insightful

      Link it with possible terrorism to bypass the usual rules that would prevent a dragnet, and chances are good you find your man. At least, that's how I'd investigate.

      Well then thank goodness you're not investigating. Crap like this is the exact reason many of us were outraged at the Patriot Act and similar legislation; back in 2001-2 we argued that such legislation would become an easy way for investigators to ignore the Constitution for a host of other crimes. There's been plenty of evidence of that happening already, but it's rare to see someone openly advocate such an abuse of law -- usually, in fact, conservatives defended these laws by saying they would never be used against anyone but the most dangerous international terrorists.

    11. Re:sourcing the problem by Anonymous Coward · · Score: 0

      All signs point to recent financial irregularities at credit unions with technology created by the Initech Corporation.

      Perhaps if the industry had standardized on the superior products from Intertrode, all of this could have been avoided.

    12. Re:sourcing the problem by NeutronCowboy · · Score: 4, Informative

      I was about to post the same exact words. The analysis is completely faulty, based on some incredibly vague and unrelated statistics, and the call to action includes zero verification of those assumptions. Narrowing the US population to the specified profile would probably provide a single hit, but that hit would also almost certainly not be related to the trojan. That's because this is a pure case of garbage in, garbage out.

      --
      Those who can, do. Those who can't, sue.
    13. Re:sourcing the problem by girlintraining · · Score: 1

      They use the hijacked accounts to purchase large quantities of a low-volume penny stock. The attacker, or the group he works for, already have a large position in that stock. The huge increase in demand pushes the price for the stock up. This causes all kinds of people to sell--including the attacker. And they make a tidy profit, while the victims are left with a large quantity of over-priced stock.

      Okay, sounds like your classic pump-and-dump, but let's ignore that for a minute.

      Whether he's working alone or in concert with a group of criminals, first. The probability of success is an inverse of the number of people involved in criminal enterprise. That is to say, the more people there are;
      (a) the more likely mistakes are made that can expose the individual and/or group,
      (b) the more likely for political issues to form within the group that tear it apart (and raising the chance of someone coming forward),
      (c) the less profit for each player, and
      (d) the more communication is needed between members.
      Implicit to this is trust -- whomever each player works with, they have to trust all the other members. For these reasons, it's very likely they met incidentally in real life, built a relationship from this, and there is some paper trail linking them all together. So bust one, you bust them all even if they don't talk -- It's actually advantageous to an investigator to have groups of criminals as opposed to individuals -- because it's easier to play them off each other and the communications between them are far, far, more likely to be over channels which can be monitored. So, in summary -- Groups are good for our team.

      Now, that said, let's talk about the pump-and-dump. You are correct that these schemas are difficult by simply viewing trading transactions, because the missing piece of the puzzle is communication between the participating parties, directly or otherwise. But here's the fun part -- we'll find out who the victims are because of fraud reports that will trickle in, and a pattern will emerge telling us what stocks are involved. The many to one relationship means we can eliminate small purchases of the useless stock, and at some point near where the stock price crests, we have a list of who the sellers are. Very likely these won't be short trades either, but trades in quantity -- because it's easier to do it in one go or a couple than a few hundred, and the rate of return is far greater. They will focus their efforts too, because of simple statistics. A quarter million machines are infected, but this worm has a very specific kind of user and application -- so only a small fraction of those machines will actually be useful to the conspirator(s). This necessitates a more focused effort -- fewer trades, at larger amounts.

      And that's the crucial flaw -- they have to sell, and yes, several people will sell in the target window of opportunity -- but how many of them will sell who fit the profile of the criminal we're looking for? Not very many. And monitoring their personal finances will give us the tell-tale signs needed to gain a confession.

      --
      #fuckbeta #iamslashdot #dicemustdie
    14. Re:sourcing the problem by girlintraining · · Score: 1

      Someone likes their CSI

      Someone worked for one of the few fortune 500 companies with not one, but two digital forensics laboratories.

      --
      #fuckbeta #iamslashdot #dicemustdie
    15. Re:sourcing the problem by gad_zuki! · · Score: 1

      At least, that's how I'd investigate.

      Err thats why youre a semi-anonymous poster on a web board known for its biases and natalie portman jokes and not in law enforcement. Unlike Americans, Russians and Chinese hackers speak and read more than one language. The idea that this must be a white guy in the suburbs who was just laid off is naive. The possibilities are pretty huge. Not to mention the historic arrests for this kind of thing turns out to be non-americans. Anything is possible but if you profiled me, accused me of this, and had me questioned by police, embarassed me, or cost me my reupation because of your CSI-like hunch, well, youd be getting fucked by my lawyer right now.

    16. Re:sourcing the problem by girlintraining · · Score: 3, Interesting

      I don't know em personally either, but I've got enough experience with DSM and psychological profiling to call shenanigans on your assessment.

      And yet you don't state your qualifications. Well, here's mine: I have been in information technology for eleven years, have done network and system administration at the enterprise level, and have assisted investigators tracking down so-called "hackers". I also have about four years of programming experience, mostly to support the aforementioned. I also have spent a significant portion of my professional time learning digital forensics, taking apart malware kits, and have friends that do skip-tracing professionally (they track people down, and I know people who do civil and criminal). I have also worked on classified government systems (can't say which, obviously), and busted two people on-site who attempted to access information without authorization on those systems (the men with shotguns came and took them away). I do know what to look for, and I have caught people who thought they were so very much smarter than we were. Repeatedly, and sometimes in the flesh.

      You're right, I have no idea who this person or people are. That said, if this guy was working with a herder or someone with access, the vector would have been found by now. It hasn't, which means they're not using an established botnet for deployment. Not only that, but while some of the programmic methods may be similar, that alone shouldn't make an investigator jump to the conclusion the two are in contact with one another. Especially not with the volumes of security research on how these networks operate available to the public. Even slashdot has published links to the aforementioned! All this said, again, you're also right that I don't have a degree in psychology, or criminal profiling, etc. -- I just deal with these people on the front line and I'm going by what my gut and my experience tells me should be there. A real profiler would start with known facts, which I don't have, and have a support team to get definitive answers, which I also don't have. It's still a lot better of an educated guess than most people here could make.

      --
      #fuckbeta #iamslashdot #dicemustdie
    17. Re:sourcing the problem by gringer · · Score: 1

      Are you, perchance, describing yourself?

      --
      Ask me about repetitive DNA
    18. Re:sourcing the problem by girlintraining · · Score: 1

      Well then thank goodness you're not investigating. Crap like this is the exact reason many of us were outraged at the Patriot Act and similar legislation; back in 2001-2 we argued that such legislation would become an easy way for investigators to ignore the Constitution for a host of other crimes. There's been plenty of evidence of that happening already, but it's rare to see someone openly advocate such an abuse of law -- usually, in fact, conservatives defended these laws by saying they would never be used against anyone but the most dangerous international terrorists.

      The tools are there. You're naive if you think they won't be used. I'm not here to discuss the morality of such actions, and your moral outrage will be confined to a website far from anyone making the decisions, which makes it a political act of utter insignificance. Sorry if this is an unpopular statement to make, but I'm not interested in gaining popularity. Save that for someone who needs to get elected, or win an argument on an obscure electronic forum.

      The truth is something that only people of a certain moral flexibility are good at uncovering.

      --
      #fuckbeta #iamslashdot #dicemustdie
    19. Re:sourcing the problem by johnsonav · · Score: 1

      The probability of success is an inverse of the number of people involved in criminal enterprise.

      And yet organized crime still exists, in the US and abroad. If this is a pump-and-dump type scheme, it's almost certainly being financed by an organized crime syndicate somewhere. It takes money to make money, in this instance.

      You are correct that these schemas are difficult by simply viewing trading transactions, because the missing piece of the puzzle is communication between the participating parties, directly or otherwise.

      The only thing the attacker needs from the victim are the login details(username and password) to their brokerage accounts. After that, the criminals can access those accounts from anywhere in the world. Or, they can use the rootkit from the virus to originate those transactions from the victim's own machine.

      The many to one relationship means we can eliminate small purchases of the useless stock, and at some point near where the stock price crests, we have a list of who the sellers are.

      These stocks may be sold in many countries all around the world. US stocks can be traded on exchanges in Europe and Asia. Even if the victims accounts were used to purchase stock on the US market, the criminals can sell on dozens of different markets around the world. So you have to get lists of sellers from many different exchanges in many different countries. That makes it much harder.

      And that's the crucial flaw -- they have to sell, and yes, several people will sell in the target window of opportunity -- but how many of them will sell who fit the profile of the criminal we're looking for?

      What profile are you looking for? The sellers could be anyone. And because they could be anywhere, you now need the cooperation of dozens of different governments.

      Think about it: The actual criminal mastermind could be a Russian mobster. The seller of the stock--who is working for the Russian--could be in Estonia, using an British broker, and selling these stocks on the German exchange. Where do you start?

      --
      ... and that's when the C.H.U.D.'s came at me.
    20. Re:sourcing the problem by girlintraining · · Score: 1

      Err thats why youre a semi-anonymous poster on a web board known for its biases and natalie portman jokes and not in law enforcement.

      Actually, it's mostly populated by computer geeks, and every group is well-known for its biases, that's how a group defines itself. It's not well known for it's natalie portman jokes--well, I haven't seen any, at any rate, and if there are jokes about that actor, it's purely a community thing, not what slashdot is known for -- which is having a large base of computer geeks and posting on topics that interest them. And geeks (strangely enough!) tend to have interests in all things technical, medical, or just plain complicated. And the smarter and more experienced geeks tend to have interests outside their primary interest about which they are more than merely informed on.

      Unlike Americans, Russians and Chinese hackers speak and read more than one language. The idea that this must be a white guy in the suburbs who was just laid off is naive.

      Yeah, but how did those hackers learn the internal workings of those financial service providers? And the question is also raised -- why just those providers? They're all US-based, and in english. Are you telling me those are the only financial targets worth hitting? Why not institutions in Europe? All of the providers are in the United States -- that implies a geographical bias. The simplest explanation is because they are geographically or culturally "local" to the attacker(s) -- they are familiar icons. That's a reasonable beginning assumption in any investigation.

      The possibilities are pretty huge. Not to mention the historic arrests for this kind of thing turns out to be non-americans.

      "this kind of thing"? "Non-americans"? The United States practically pioneered financial fraud, which logically follows since we have the most developed economy in the world, and other countries come here to learn how to structure their financial institutions, not the other way around.

      Anything is possible but if you profiled me, accused me of this, and had me questioned by police, embarassed me, or cost me my reupation because of your CSI-like hunch, well, youd be getting fucked by my lawyer right now.

      I would say you self-selected off the list -- any programmer worth his salt would have better punctuation and spelling than you. Debugging is such a pain. Also, unless your lawyer is attractive, female, and gay, they would not sexually excite me. :P

      --
      #fuckbeta #iamslashdot #dicemustdie
    21. Re:sourcing the problem by Anonymous Coward · · Score: 0

      but the most dangerous international terrorists.

      Not to advocate violation of "your" constitution but isn't the creator of a malicious worm by definition simultaneously dangerous (can cause serious system damage) international (again by definition anything on the internet is international) and a terrorist (cyber-crime is the next evolution of terrorism as systems become more and more reliant on computer systems.)

    22. Re:sourcing the problem by Anonymous Coward · · Score: 0

      You're making assumptions that this trojan stole money or made trades on someone's account. What if the trojan took data on outstanding stock orders and participated in front-running ie making a penny or two less than the savvy stock trader. Imagine knowing when Bill Gates puts in an order to sell 1 million shares of MSFT and at what price. That kind of order is going to move the stock and that information is valuable.

    23. Re:sourcing the problem by mgblst · · Score: 1

      I think we can do better than this.

      He is 28-29, brown eyes/ brown hair, slightly overweight, with a tattoo of winnie the pooh on his upper right thigh. Because the gf he had for 1 month really liked it. Oh, and he likes tweetos and 7up, and hasn't changed his undies in 3 days.

    24. Re:sourcing the problem by JustKidding · · Score: 1

      I guess the perpetrators might be found by correlating the buyer/seller data from a number of cases where fraud is reported.

      The perpetrators could try to make this more difficult by making the data harder to correlate; pump some stocks that they don't buy or sell, pump some stocks, but intentionally sell outside the obvious window of opportunity, possible at a (small) loss, using multiple, unrelated accounts to buy and sell the stock, etc.

      That way, the detectives have to try to find multiple unrelated perpetrators (from their point of view, because of the separate accounts), that have made a significant profit in some of these cases.

      I think it's going to take a whole lot of very interesting data mining to find them, based on the stock data only.

    25. Re:sourcing the problem by Anonymous Coward · · Score: 0

      Someone's full of herself and is working too hard to have time to brag on Slashdot if the brags are true.

    26. Re:sourcing the problem by Anonymous Coward · · Score: 0

      As someone who is prone to formulating harebrained schemes, I have to provide an alternate scenario.

      He may just be datamining to gain some sort of advantage over the market. All of the publicly available sources of data are all heavily analyzed by tons of other traders so you need hidden data to gain an advantage.

      Information like stock symbols that people are looking up (an indicator of interest in the stock and possibly correlated to volatility) and trades that people queue in the off hours (which could provide insight into the early morning movements of the market). You might be able to capture a sort of day-trader zeitgeist that could predict intra-day market movements.

      The benefit of this scheme is that it leaves no financial trail to the culprit. It would also probably be easier for him to rationalize his crime because there's no apparent victim.

    27. Re:sourcing the problem by tsm_sf · · Score: 3, Insightful

      Yes yes, we've always known that it's harder to be good than evil. We've got thousand year old texts on the subject, we have pop sci-fi trilogies (ahem) on the subject. It's a known deal.

      Me personally, I'd rather see a few thousands die than see our country go down the path of least resistance. I've been unfortunate enough to see both occur during the past decade.

      --
      Literalism isn't a form of humor, it's you being irritating.
    28. Re:sourcing the problem by NeutronCowboy · · Score: 1

      Well, since you're talking qualifications... I've worked in IT for 9 years, have done network and system administration at the enterprise level, have organized IT departments, instituted security and monitoring policies and worked in classified government installations. I've done enough programming to know my way around applications that run over LAN or WAN. I've studied psychology and have enough friends in that area to know what a proper assessment is and what isn't. I know at an enterprise level who the threats are, because I saw the reports that came down for them. I have seen who the threats are we didn't catch - because they were smarter than the dumb little pricks who work on their own and do get caught.

      Qualifications are all fun and games, but in the end, they really don't matter. The only thing that matters is whether based on known facts, are the conclusions valid. What I can tell you is that the vast majority of criminals go after an esoteric target with a lot of effort only when they know exactly who will benefit from the end result, and how to move the product. It is possible this is a lone actor on his own, but very unlikely.

      Now, all this might change once we get a better idea of the attack vector. But in the meantime, assessing this as a lone actor threat is.... premature. Not to mention that it will cause you to underestimate the threat.

      --
      Those who can, do. Those who can't, sue.
    29. Re:sourcing the problem by bootup · · Score: 1

      If you are going to try to convince others that you know something they don't you probably best not talk about credentials or "qualifications". At least without them you might have a chance at sounding a little less dumb.

    30. Re:sourcing the problem by bootup · · Score: 1

      I'm 20 years old and I've worked IT for 25 years. Now. I know a bit more than you do. So let me tell you why you are ALL wrong..... Really. This is stupid. I can't believe I'm even replying to it.

    31. Re:sourcing the problem by NeutronCowboy · · Score: 1

      It's not well known for it's natalie portman jokes

      That's simply because you haven't been around long enough. You presume a lot for someone who doesn't much history.

      --
      Those who can, do. Those who can't, sue.
    32. Re:sourcing the problem by Anonymous Coward · · Score: 0

      Good god, Doofy, is that you?

      You are a mall security guard who once had the fbi buy something in the mall, now you say you "assist" the feds.

      You are right though, you have no training in this area whatsoever, being in IT and being a programmer does not make you a criminal investigator, I don't care what your hobbies may be.

      You have no clue how these networks operate, nor the type of people that operate them. Organized crime is so way beyond anything you have ever dealt with Doofy.

    33. Re:sourcing the problem by NeutronCowboy · · Score: 2, Insightful

      The truth is something that only people of a certain moral flexibility are good at uncovering.

      Err, again, no. The truth has little to do with moral flexibility and all to do with facts. The fact that you confuse the two makes me question whether you understand what truth actually is.

      Finally, you're also sadly mistaken if you assume that what you do on a forum has no repercussions elsewhere. At the very least, what you say on it is a reflection of who you are, and how you will act outside of it. It's not a political act, it's a social statement.

      You might be technically savvy, but your understanding of the rest of the world is seriously lacking. Your confidence in your knowledge will make it difficult for you to learn.

      --
      Those who can, do. Those who can't, sue.
    34. Re:sourcing the problem by Anonymous Coward · · Score: 0

      Attacks like this, namely single vector and single target, point to a single person or small number of persons who have found some way of using the data to profit themselves. We're probably looking at someone in their late 20s, based in the United States(cursory examination -- appears the institutions are all english and based in the US), upper middle class, 5-7 years experience programming (self-explanatory), single, male, and with a history of mental health disorders along axis IV, socially under-developed, (the two are usually related, and most white-collar criminals have mental health disorders but are still highly intelligent) and likely recently became unemployed and is trying to maintain his upper-middle class income.

      Wow! You can tell all that from a summary on /.?

    35. Re:sourcing the problem by Anonymous Coward · · Score: 0

      It's not well known for it's natalie portman jokes

      Also, unless your lawyer is attractive, female, and gay, they would not sexually excite me.

      Just saying.

    36. Re:sourcing the problem by rts008 · · Score: 1

      The United States practically pioneered financial fraud, which logically follows since we have the most developed economy in the world, and other countries come here to learn how to structure their financial institutions, not the other way around.

      That is one of the more ill informed statements I have seen in a while.

      Pioneered financial fraud? It was already an art form before anyone but (relatively few) Native American Indians knew this continent existed. We may(or may not-I don't know) have pioneered financial fraud 'on the internet', but not anywhere near close to your statement.

      Other countries come here to learn how to structure...What? [citation needed] is all I can say here!

      I know the education system here sucks, but get real!

      --
      Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
    37. Re:sourcing the problem by NeutronCowboy · · Score: 1

      Listing of experience in an argument is always retarded. Because a) there's always someone with more experience, and b) because it doesn't mean squat. Some people just haven't learned that yet.

      --
      Those who can, do. Those who can't, sue.
    38. Re:sourcing the problem by Anonymous Coward · · Score: 0

      The only thing missing is the DNA evidence! Theres likely semen in the code!

    39. Re:sourcing the problem by dbcad7 · · Score: 1

      find out where the money is going

      Well, you forgot a step.. Find out how what this is doing that translates into money.. you can't find out where the money is going until you know that.. There are a few possibilities.. but the one that makes sense to me, is to collect data on individual investors to sell to brokers.. For example a list of investors who trade x amount of dollars with E-trade might be something that Merrill Lynch would be interested in buying... Of course we all know that all these brokers are way too ethical to buy such information.

      --
      waiting for ad.doubleclick.net
    40. Re:sourcing the problem by commodoresloat · · Score: 1

      No.

    41. Re:sourcing the problem by commodoresloat · · Score: 1

      Eh? If by "the tools" you mean the violations of the Constitution, I didn't say they wouldn't be used in precisely the manner you advocate -- quite the contrary, they are being used in this way, despite the claims of those who supported this legislation to begin with that they wouldn't. Your claim that "the truth" somehow requires complete ignorance and apathy towards all matters moral and legal is bizarre, to say the least, but I'm not sure it's even relevant to the discussion.

    42. Re:sourcing the problem by badkarmadayaccount · · Score: 1

      Would you agree to be one of them?

      --
      I know tobacco is bad for you, so I smoke weed with crack.
    43. Re:sourcing the problem by badkarmadayaccount · · Score: 1

      Mod parent up "+1 Gotcha".

      --
      I know tobacco is bad for you, so I smoke weed with crack.
    44. Re:sourcing the problem by tsm_sf · · Score: 1

      How would that work, exactly?

      Would I volunteer to fight the Nazis in WWII? Sure.
      Would I just say yes to your question because it's essentially meaningless? Sure.

      The point isn't that death doesn't matter. The point is that it's irrelevant to talk about civilian death due to terrorism in the context of our country's core principles.

      --
      Literalism isn't a form of humor, it's you being irritating.
    45. Re:sourcing the problem by badkarmadayaccount · · Score: 1

      Just jokingly checking if you're a hypocrite, you aren't, now calm down.

      --
      I know tobacco is bad for you, so I smoke weed with crack.
  8. time for 2-factor by Lord+Ender · · Score: 3, Insightful

    It is time for online financial institutions (brokerages and banks) to require real 2-factor authentication to log in to their sites. When I sign up for a bank account, I want them to mail me an ATM card with an embedded smartcard chip, along with a cheap USB smartcard reader. Alternatively, send a one-time-passphrase device like SecurID.

    This may be a little expensive up front, but it would cut down on enough fraud that it might pay for itself.

    --
    A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    1. Re:time for 2-factor by Darkness404 · · Score: 2, Insightful

      I want them to mail me an ATM card with an embedded smartcard chip, along with a cheap USB smartcard reader.

      Thats just fine, but they most likely won't release drivers for it for anything other than Windows and perhaps OS X, so any BSD, Linux, or other alternate OS user gets left out.

      Secondly, it would be trivial for an attacker to put in compromised drivers in the system that reads out all the secure info and forwards it to his website where he can duplicate all the secure keys and such.

      --
      Taxation is legalized theft, no more, no less.
    2. Re:time for 2-factor by oldspewey · · Score: 2, Informative

      I thought some of the online brokerages were already using SecurID (or similar) authentication?

      --
      If libertarians are so opposed to effective government, why don't they all move to Somalia?
    3. Re:time for 2-factor by Anonymous Coward · · Score: 0

      I have this, the card reader is not connected to the computer but standalone. I believe this is common practice nowadays, at least in Europe.

    4. Re:time for 2-factor by Inda · · Score: 1

      They're great. Without the reader, the worst someone could do after obtaining passwords, PINs and account numbers, is pay my bills.

      --
      This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
    5. Re:time for 2-factor by Lord+Ender · · Score: 1

      Secondly, it would be trivial for an attacker to put in compromised drivers in the system that reads out all the secure info and forwards it to his website where he can duplicate all the secure keys and such.

      First of all, smartcard reader drivers exist for linux. The aren't complex devices.

      Second, you have no idea how smartcards work. The private key never leaves the chip.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    6. Re:time for 2-factor by pz · · Score: 1

      This may be a little expensive up front, but it would cut down on enough fraud that it might pay for itself.

      Or have customers pay for their own passphrase-generating device, like PayPal did.

      --

      Put my fist through my alarm clock with its ding-dong death inside my ear. - The Blackjacks.
    7. Re:time for 2-factor by ACMENEWSLLC · · Score: 1

      My bank offers me the RSA SecurID feature for $20. It also offers me identity theft protection for free, with no deductible.

      I have several RSAid's, one per site I use. Why can't I have just one and have RSA the hosted SecurID Management site, like openID?

    8. Re:time for 2-factor by linux_geek_germany · · Score: 1

      Mine does - so it probably is safe to assume that at least a few others do as well.

    9. Re:time for 2-factor by Anonymous Coward · · Score: 0

      And this has nothing to do with the described trojan. TFA which no one read, says that this was on the workstations for people working for these companies. 27 factor authorization won't change whether the computer in the brokers' office gets compromised.

    10. Re:time for 2-factor by Redneck+Flyboy · · Score: 1

      E*Trade does at least for account holders with sufficient assets.

      --
      "Maintain thy airspeed, lest the ground rise up and smite thee." - Unknown
    11. Re:time for 2-factor by ekhben · · Score: 1

      My bank sends an SMS to my phone with an authorisation number for most transactions (there are a small number of pre-approved recipients of transfers, and I can set up new ones pre-approved for my own account). It's out of band, cheap and easy to implement, and reasonably secure. No fuss, no muss, no mass mailout to existing customers.

    12. Re:time for 2-factor by Anonymous Coward · · Score: 0

      It is time for online financial institutions (brokerages and banks) to require real 2-factor authentication to log in to their sites. When I sign up for a bank account, I want them to mail me an ATM card with an embedded smartcard chip, along with a cheap USB smartcard reader. Alternatively, send a one-time-passphrase device like SecurID.

      Etrade does this already. The rsa SecurID is free if your account has a minimum balance.

    13. Re:time for 2-factor by Anonymous Coward · · Score: 0

      My savings account uses a SecurID type fob. It's a good idea for security but I don't think it'll take off mainstream because it means I have to have the fob with me to access the account. I think people prefer convenience to security unfortunately.

  9. Malware that removes malware by djveer · · Score: 2, Interesting

    Interestingly the Tigger trojan actually goes to the trouble of removing other more 'intrusive' malware that Anti-malware products currently detect in order to keep a low profile.
    This makes me wonder just how widespread it could be.

  10. Now what we really need... by alvinrod · · Score: 5, Interesting

    If only there were a similar piece of malware in direct competition with this particular trojan such that both would attempt to remove the other and successfully do so.

    It is interesting how malware is adapting so that not only is it able to spread more quickly to a larger number of machines, but also that it's attempting to increase its lifespan by killing off other malware so that the host may not notice that it's infected. I wonder how long it will be until a particular program updates a virus definition list or something similar to remove all other competing malware programs as they come into existence. Also, how much better will the malware be at quickly patching machines against new zero-day exploits than actual virus scanning and prevention software?

    1. Re:Now what we really need... by DigitalCrackPipe · · Score: 5, Insightful

      I wonder how long it will be until a particular program updates a virus definition list or something similar to remove all other competing malware programs as they come into existence
      Such a malware product exists... it's called McAfee, and while it's not very good it does convince lots of people to pay money for it.

    2. Re:Now what we really need... by WidgetGuy · · Score: 1

      Technically, this is not a virus. It's the algorithm we've long suspected underlies the Microsoft Marketing Strategy for World Domination (MMSWD). It leaked out as an attachment to a leaked e-mail from Redmond.

      You didn't hear this from me. Just a minute... Someone's at the door. Thud! Ugh!

      --
      One "Aw, Shit!" is worth 100 "Ata boys!"
    3. Re:Now what we really need... by Anonymous Coward · · Score: 0

      You talk like it's an evolving creature. This is nothing more than some programmer who decided to add a feature to remove certain other software to keep it living longer, which has happened forever.

    4. Re:Now what we really need... by Anonymous Coward · · Score: 0

      I wonder how long it will be until a particular program updates a virus definition list or something similar to remove all other competing malware programs as they come into existence

      Such a malware product exists... it's called McAfee, and while it's not very good it does convince lots of people to pay money for it.

      You said it.......... our company was one of the ones duped into infecting our pretty much entire national network with Mcaffee. Right on par with Norton products (Consumer) for stealing resources while doing absolutely nothing.

    5. Re:Now what we really need... by jrumney · · Score: 5, Funny

      while doing absolutely nothing.

      That's a bit harsh. McAffee does a perfectly good job of preventing me doing reasonable things with my own PC like installing programs, running Windows update and using bluetooth to sync with my phone. I wouldn't call that "nothing".

    6. Re:Now what we really need... by EdIII · · Score: 1

      Yeah, it's nice to attack McAfee, but what is YOUR alternative?

      I had to stop using and installing Norton since it made systems unstable and crash. It was a resource nightmare. I had less problems once I installed McAfee. Of course, I was never under the delusion that it could catch everything, but it was better than nothing.

      Sincerely, if you have something against McAfee and it is not a good product, then what is your solution to Antivirus on the desktop and your gateways?

    7. Re:Now what we really need... by rts008 · · Score: 1

      NOD32, AVG, and Avast are 3 that I have recommended to Windows users for the past several years. My own antivirus solution is Kubuntu and common sense, which has worked painlessly for 6 years now.

      --
      Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
    8. Re:Now what we really need... by RoFLKOPTr · · Score: 1

      Yeah, it's nice to attack McAfee, but what is YOUR alternative?

      I had to stop using and installing Norton since it made systems unstable and crash.

      Who's the dumbass that told you to use Norton instead of McAfee? You really shouldn't be using either.

    9. Re:Now what we really need... by CrossChris · · Score: 1

      Yeah, it's nice to attack McAfee, but what is YOUR alternative?

      Simple - don't use an operating system that's open to abuse by malware.

      Clue: Why do you think that major banking institutions don't "run" Windows?

    10. Re:Now what we really need... by EdIII · · Score: 1

      Who's the dumbass that told you to use Norton instead of McAfee? You really shouldn't be using either.

      I said:

      I had less problems once I installed McAfee.

      I would think the chronology was clear here. I used McAfee instead of Norton. Particularly since the enterprise version came with the routers I had to setup and install.

    11. Re:Now what we really need... by RoFLKOPTr · · Score: 1

      Sorry, I flipped them around. But the fact still stands that

      You really shouldn't be using either.

    12. Re:Now what we really need... by EdIII · · Score: 1

      Simple - don't use an operating system that's open to abuse by malware.

      That's simplistic. I am not a fan or apologist for MS, but it is just not that simple.

      Linux DOES have weaknesses that can be exploited, and although I will admit it is intrinsically better than MS, it is not perfect. It's MS market share that causes it to be the preferred platform for viruses, spyware, and malware in general.

      If every MS desktop disappeared tomorrow you would see malware written for Linux before the end of the year.

      As for the major banking institutions, that is a generalization. I know that CitiBank and Wells Fargo are running XP Professional on their desktops. Of course they might be thin clients running linux, but that would STILL be a terminal server environment.

      In any case, not every solution can be provided without MS products. It's hard to get businesses and clients to switch their platforms for a myriad of reasons. Even when you show them that it costs less money in the long run, they still want to stay within their comfort zone.

      What about home users? It's a bit arrogant and sadistic to condescendingly tell them "they suck", "your stupid", and "MS is the OS of unwashed masses". "Come over to Linux and you might have some hope".

    13. Re:Now what we really need... by Anonymous Coward · · Score: 0

      I wonder how long it will be until a particular program updates a virus definition list or something similar to remove all other competing malware programs as they come into existence

      This may already have been done, kind of. A while ago there was a trojan that, rather than write its own rival-malware-removal routines, shipped with a full cracked copy of Kapersky Antivirus ...

    14. Re:Now what we really need... by Anonymous Coward · · Score: 0

      i for one welcome our botnet overlords... and by the way all our base are (and have always been} belong to them :}

    15. Re:Now what we really need... by Stratocastr · · Score: 1

      Yeah, it's nice to attack McAfee, but what is YOUR alternative?

      Linux fix'd

      --
      Slashdot - I went there to fix their grammar that they're so bad at.
    16. Re:Now what we really need... by Anonymous Coward · · Score: 0

      No, what we really need is Microsoft to setup a Torrent tracker, make hashes for all versions of Windows system files, then integrate that into Microsoft Defender.

      Phase 2 could be using a trojan-like TSR to facilitate hash-checking on every .exe/.dll loaded into memory.

      Phase 3 could be certifying 3rd party applications by hashing their .exe/.dll and adding them to the MS torrent tracker.

    17. Re:Now what we really need... by Jeremi · · Score: 1

      Yeah, it's nice to attack McAfee, but what is YOUR alternative?

      "Stay the hell away from Windows" works for me. (or if I absolutely must run Windows, I run it in a VM and give it as little access to the network as I can get away with)

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    18. Re:Now what we really need... by MetalFlow · · Score: 1

      AVAST! Antivirus... free to home users, light on resources, and a decent real-time scanner... works for me

    19. Re:Now what we really need... by RMH101 · · Score: 1

      If you've not used them much yourself for the last year or two, then you might want to deprecate AVG. It's got a bit fat and clunky and they seem to be slipping into Norton mode. There's a new guy in town, too: Avira has a free-for-personal-use version, a small footprint and gets excellent reviews.

    20. Re:Now what we really need... by Anonymous Coward · · Score: 0

      But talking to McAfee 2nd tier tech support now and they know nothing about this. They are totally in the dark. Our execs are reading about it in the newspapers and our McAfee support never heard of it.

    21. Re:Now what we really need... by DigitalCrackPipe · · Score: 1

      Independent (and not malware-supported) antivirus comparisons have found McAfee and Norton to be consistently not at the top for performance or for ability to detect a sufficient number of viruses. Try one or more of the free products, such as Avira AntiVir, Avast! antivirus, or AVG. The reason I and many others have such distaste for McAfee is that while we've moved on to superior products at home, many workplaces stick with those two well-known ones simply due to name recognition. The performance of both Norton and McAfee is completely unacceptable.

  11. And... by Anonymous Coward · · Score: 2, Funny

    ...nothing of value was lost.

  12. In other news... by kabrakan · · Score: 1

    **$tarDu$t* also recommends David Bowie's Station to Station for a complete botnet soundtrack.

    --
    Slartibartfast:"Is that your robot?"
    Marvin:"No, I'm mine."
  13. Superb scheme by Anonymous Coward · · Score: 0

    Usually police can track botnet owners just by following the money, but in this case there is no money to track.

  14. Version 2.0 by russotto · · Score: 4, Interesting

    Version 2.0 won't just steal data. It'll make trades. Aside from the obvious theft possibilities, the controller would have the ability to create his very own economic meltdown, in any companies he wished, limited only by the size of his botnet...

    1. Re:Version 2.0 by mgkimsal2 · · Score: 2, Interesting

      If it's too blatant ("meltdown") trading will just be halted. Better to be small about it. Buy stock X. Start doing a few hundred buys against a small stock from various PCs, run up the price, sell stock X, keep profit. Not much different than the email scams that try to pump up penny stocks, except in this case rather than just trying to get someone to buy it, you'd just buy it from their account for them.

      I've often wondered when viruses would start getting smarter. A virus that simply changed some of your appointments in Outlook's calendar (or emailed recipients stating that a meeting had been cancelled or changed) would cause HUGE amounts of damage. A virus that would just open Excel, change a few numbers, the resave it silently, would, again, do HUGE amounts of damage. It would be very hard to trace this at first, and may have long lasting results. But virus writers seem to want to be so "in your face" about the fact that you're infected (using up all your CPU/network, for example) that people immediately know they have a virus and take steps to remove it.

      This little bugger sounds pretty smart, removing other viruses in an attempt to keep the host unaware of any compromise. Good thinking.

    2. Re:Version 2.0 by Anonymous Coward · · Score: 0

      Version 2.0 won't just steal data. It'll make trades.

      And in version 3.0 they develop an automated system that makes better trades than the Wall $treet boobs and the economy recovers!

    3. Re:Version 2.0 by Gamma747 · · Score: 1

      A virus that simply changed some of your appointments in Outlook's calendar (or emailed recipients stating that a meeting had been cancelled or changed) would cause HUGE amounts of damage. A virus that would just open Excel, change a few numbers, the resave it silently, would, again, do HUGE amounts of damage.

      None of those things would allow the virus writer to make a profit. The motive behind almost all virus/spyware networks these days is money.

    4. Re:Version 2.0 by Anonymous Coward · · Score: 0

      A virus that would just open Excel, change a few numbers, the resave it silently, would, again, do HUGE amounts of damage.

      Ah, you have discovered the true cause of the mortgage crisis.

    5. Re:Version 2.0 by russotto · · Score: 1

      How much would, say, Vladimir Putin, pay to cause economic disruption in the United States?

    6. Re:Version 2.0 by russotto · · Score: 1

      And in version 3.0 they develop an automated system that makes better trades than the Wall $treet boobs and the economy recovers!

      I hear it'll be based on Bruce Schneier's Yarrow system.

  15. Operating Systems List (XP Only) by solder_fox · · Score: 3, Informative

    It would be nice if they had a list of Antivirus programs that were effective and/or operating systems affected, nice and prominent somewhere linked from the article.

    FYI, from the security bulletin:

    Affected software:
    XP Service Pack 2 & 3
    XP Pro x64 and x64 Service Pack 2
    Server 2003 Service Packs 1 & 2
    Server 2003 x64 and x64 Service Pack 2
    Server 2003 with SP1 and SP2 for Itanium

    Non-affected:
    Win2K SP 4
    Vista & Vista SP1
    Vista x64&SP1
    Server 2008 32
    Server 2008 x64
    Server 2008 Itanium

    1. Re:Operating Systems List (XP Only) by Anonymous Coward · · Score: 0

      It would be nice if they had a list of Antivirus programs that were effective and/or operating systems affected, nice and prominent somewhere linked from the article.

      FYI, from the security bulletin:

      Affected software:
      XP Service Pack 2 & 3
      XP Pro x64 and x64 Service Pack 2
      Server 2003 Service Packs 1 & 2
      Server 2003 x64 and x64 Service Pack 2
      Server 2003 with SP1 and SP2 for Itanium

      Non-affected:
      Win2K SP 4
      Vista & Vista SP1
      Vista x64&SP1
      Server 2008 32
      Server 2008 x64
      Server 2008 Itanium

      I think you forgot that all of FLOSS is unaffected. HTH. I know, that's assumed in some quarters, but not others.

    2. Re:Operating Systems List (XP Only) by Sfing_ter · · Score: 1

      the month is just beginning - and MS invariably opens more holes - they have the patent on Whack-A-Mole coding.

      --
      A computer once beat me at chess, but it was no match for me at kick boxing. Emo Philips
  16. dude by circletimessquare · · Score: 4, Funny

    you just described the entire slashdot demographic

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:dude by MichaelSmith · · Score: 1

      you just described the entire slashdot demographic

      By the time I was 30 I had 15-20 years experience programming, not 5-7. And not everybody works closely enough with financial systems to think to pull this off.

  17. If it were me... by Thelasko · · Score: 1

    Forget tracing back through the network -- find out where the money is going. You have a many-to-one relationship, it's unlikely this guy is smart enough to launder money effectively

    When you are talking about stocks, laundering the money is easy. Simply buy some options in a particular stock with your own money and have your botnet purchase that stock with other people's money. If your botnet makes the trades quickly enough (it probably will) the stock's price will go up and the value of the options will follow exponentially. Sell the options near the top and reap the rewards.

    They will never find this person among all of the trades on Wall Street.

    --
    One of our competitors trademarked the term "hypothesis". From now on, we will call them "boneheaded ideas".
    1. Re:If it were me... by girlintraining · · Score: 1

      You're making a critical assumption -- that this guy is financially savvy, not just technically savvy. He may understand the value of stocks, but trading stocks and making a profit at it is entirely another set of skills, and he'd need money to blow to learn that skill in the first place... Which begs the question of -- why steal illegally what you can manipulate away from someone legally? There's a threshold of knowledge here -- he knows a lot about technology (the code speaks to this), but the fact that he's targeting only a few financial systems, and the attack is highly specific, tells me he's not very good at statistics. The first thing you learn about financial systems is that they are heavily audited. Criminals hate leaving paper trails, and if there has to be one, they want somebody else's name on it. But the problem is that the criminal has to eliminate the audit trail at some point and then move the money back to himself somehow... Whether it's fenced or not, the fact remains -- how does he get paid for his work?

      That money has to come from somewhere, and there's a record of it, somewhere. It may not be practical to find it, and often times investigation is more about guessing what's there than direct evidence that a link exists. It may be a needle in a haystack, but the needle does exist.

      --
      #fuckbeta #iamslashdot #dicemustdie
    2. Re:If it were me... by Thelasko · · Score: 1

      You're making a critical assumption -- that this guy is financially savvy, not just technically savvy.

      You don't have to be financially savvy to know about pump and dump, it's the plot of a stupid movie.

      Besides, why would this person target stock trading websites and not banks?

      --
      One of our competitors trademarked the term "hypothesis". From now on, we will call them "boneheaded ideas".
    3. Re:If it were me... by X0563511 · · Score: 1

      Who's to say someone is actually profiting from this?

      If I had the skills and a lack of inhibitions, I would put out something like this simply to cause a panic.

      I'm glad I'm not that person, 'cause that would be a shitty thing to do.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
  18. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 0, Flamebait

    Yeah, we all miss the sound fiscal management of the Bush years ...

  19. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 0, Offtopic

    You mean the record-low unemployment and explosive economic growth years? The economy only turned sour when the Democrats gained control of Congress and started forcing banks to ease credit restrictions so that people who shouldn't have been able to qualify for a home loan could do so. It's called buying votes.

  20. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 0

    Did you ever stop to consider that maybe the truth about the Bush years is leaking out and the market is falling as a result of that? You know, like putting the real cost of the Iraq war in the budget and not hiding the cost?

    You can blame Obama if you want but if McCain was in there the same thing would be happening. It takes longer than 30 days to fix these problems. Come back in 2 years and let's see where we are. It took nearly 2 terms for Clinton to really fix the problems of the Reagan Era. It took Bush 2 wars and 8 years to bring the country to the brink of depression.

  21. yes but by circletimessquare · · Score: 2, Funny

    you nailed the whole "socially under-developed" bit, since you just responded with great seriousness to a throwaway joke

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  22. ooh ooh i saw this plot on csi miami by circletimessquare · · Score: 1

    "the one who is making all of the feverish accusations usually is the culprit"

    <sunglasses/>

    YEAAAAAAHHHHHHH

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  23. Insider Trading by locallyunscene · · Score: 2, Interesting

    I wonder if how the virus was spread could give clues to "who knows who"? IE: Did all the machines infected at ScottTrade start from a single intrusion, or was there some type of sharing of data between ScottTrade and TD Ameritrade? Not necessarily illicit, but seeing formal and informal alliances.

    1. Re:Insider Trading by Vancorps · · Score: 1

      Of course I also wonder if it has anything to do with the fact that I've been seeing a lot of job postings at the trading firms involved lately.

  24. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 0

    -OR-

    Investors, having heard that Obama has the successful in his cross hairs and intends to seize the fruits of their labor and give it to the unsuccessful in the name of fairness, are panicking.

  25. keep it updated.... by Anonymous Coward · · Score: 1, Informative

    All the focus here is on the AV finding the rootkit. Everyone forgets if they would have kept the machine updated, the rootkit or virus would not have been able to infect the machine in the first place. AV is a second layer of defense. MS Window machines should setup to update automatically. MS released the fix for the vulnerability this rootkit took advantage of a month or two before the rootkit was released.

  26. hsbc does this in the usa right now by circletimessquare · · Score: 1

    they give you a little red dongle, and everytime you log in, you have to enter a 6 digit number you read from the dongle's screen after pushing its button

    its annoying because i'm always misplacing the dongle

    but every time i hear a story like this one, i begin to appreciate the extra effort

    and that's really why you don't see more widespread adoption of things like this dongle: people favor convenience over security. i can see plenty of people whining about the dongle and banks worrying about losing customers

    of course, one of these days we're going to have an armageddeon-level type identity theft event, and then we'll all be using 3 factor authentication. humanity is lazy and shortsighted until its too late

    i don't see why they couldn't make the second factor elective rather than mandatory though, for security minded folks like yourself. it would be a customer relations boon for a small subsection of banking customers. its just a shame that you really only represent a minority interest

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  27. Re:Every time Obama opens his mouth... by Dutchmaan · · Score: 3, Insightful

    -OR-

    Investors, having heard that Obama has the successful in his cross hairs and intends to seize the fruits of their labor and give it to the unsuccessful in the name of fairness, are panicking.

    Don't you mean the fruits of other people's labor. Last time I checked investors don't actually produce anything.

  28. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 1, Informative

    You mean the record-low unemployment and explosive economic growth years

    Rofl...are you kidding? Explosive economic growth due to unregulated markets balooning into a giant bubble? This is just like putting rocket boots on all the wolves in the forest and then acting surprised when all the deer have been eaten, and now the wolves are somehow starving to death.

    I don't know where you got that bullshit about democrats forcing banks to loan to poor people. Banks did this intentionally and voluntarily, because they had bad statistical models that told them housing prices would go up forever, and they marketed bad (likely to foreclose) mortgage products, and they sold mortgages with little or no accurate risk data (ie: realtors/banks were lying about buyer salaries). Congress, let alone a democratic congress, had nothing to do with "forcing" this on banks...

  29. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 0

    Oh, I guess they don't produce anything - anything EXCEPT wealth, the ability for people to retire and sustain themselves in relative comfort, and a civilization with the highest standard of living the world has ever known. Take your Marxist crap elsewhere, you ignorant sluggard.

  30. Re:Every time Obama opens his mouth... by Washii · · Score: 1

    Because it took all of 1.5 years for the Democrats to legislate to the banks "give billions upon billions of dollars to people in ill financial health!"

    You know, because we wouldn't have heard that being pushed through and soundly destroying the economy in only several months, right?

    These sub-prime loans started well before the Y2K bug was due to hit, my friend.

  31. Re:Every time Obama opens his mouth... by slimjim8094 · · Score: 1

    Haha. That's amusing.

    A non-idiot would be able to see that this current... dilemma is a lot longer-standing than 3 years. The problem is, banks were getting better at making bad loans and milking them as long as they could.

    See the earlier story regarding the formula. It let them do the things that they had been doing, but better (and most importantly, longer).

    Took a lot longer than 3 years to bring down an economy.

    And, by the way, foreclosures (as a rule) are because of unexpected expenses (medical) or loss of job. Not some BS about forcing lenders' hands.

    --
    I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
  32. Re:sourcing the problem You could investigate by davidsyes · · Score: 1

    with...

    VisualAnalytics, too:

    http://www.visualanalytics.com/

    I wouldn't be surprised if THIS is the program that the NY Times(?) reporter "outed", infuriating the Bush.

    Only thing is, is I'VE been curiously and with excitment (database freaky) casually observing VisualAnalytics since, oh, about 1999 or maybe 2000. So, if this program is The One, and if the Bush had ANY thing to do with getting that NYT reporter into legal/judicial trouble, then somebody should bitch-slap him and his minions, since VA existed before the Patriot Act was published, much less drafted.

    Anyway, that trader or group of tech-savvy traders better watch out, whether or not they knew/know of VA. VA purportedly has tools to do JUST the sort of forensic sniffing of some or many of the activities you posit this guy/group might have engaged in to try to cover their tracks.

    --
    Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
  33. Unethical by Hognoxious · · Score: 2, Funny

    Tigger removes a long list of other malicious software titles, including the malware most commonly associated with Antivirus 2009 and other rogue security software titles...

    Man, that's just unethical. What's the world coming to?
    But look on the bright side - even though honour among thieves is gone, at least the banking world lives on.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    1. Re:Unethical by Anonymous Coward · · Score: 0

      ... at least the banking world lives on.

      That is the best bright side you could come up with???

  34. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 0

    Yeah, they produce wealth, just like the CEO of AnyCorp. actually produces AnyWidgets. They may play a role, an important role, but Mr. CEO wouldn't have crap without a workforce. I say you're right. Let's let all the failing banks and corporations fail. No investment in the working man. But in return the working man will no longer support Mr. CEO in his endeavors. Let's see how well that works you idiot. Don't you get it? The only reason those wealthy are wealthy is because of the worker. Without the middle class Mr. CEO is S.O.L.

  35. Microbes, Competitive Collectives, Epidemiology by Sleen · · Score: 0, Offtopic

    Its interesting to see the kind of effects as otherwise shown in the competitive worlds of microbes. Aside from host - parasite interactions, the competition between parasites is real and may create a selection force toward host integration as seen with mitochondria and chloroplasts, the precise method of symbiosis being unknown.

    The limitation and illusion of security derives from the equivalence or asymmetry of roles. In one case you have parasite where the host interaction is equivalently called parasitic. In the three types of biological interactions, mutualistic, commensalistic, antagonistic; they represent ultimately modes of transition or phase. There is no difference between parasite and client, but the mirage of shared objective.

    There is a seduction called the cooperative world view. It influences how parasites, virii and the concept of life itself is researched and represented. It shapes human social science, and the majority of human institutions devoted to human ideals and fiction. It categorically appears in every philosophy and religion created prior to the fossil fuel surplus of mid 20th century.

    2 places where cooperative world view fails is physical reality, and games or the mechanical pursuit of simulation science.

    The reason it fails is because it consistently requires more than free energy to propagate and for this, should be considered advertizing and inherently false.

    Science conducted during the fossil fuel surplus is not hard, but slick. Its called Oil Science and it is possible not through the nobility of ideals, but the availability of combustion and ultimately the exploitation of a shared planetary respiratory system.

    If competition between parasites creates an equilibrium, then the payoff function for the host may shift to include not only advantage, but perhaps predictability, which will bias a vaccuum. And suck them in.

    When we consider how our own white blood cells, the macrophages, know how to behave as fully autonomous single celled agents in our immune system, we can ask how that intelligence came to be. Could it be evidence of a past symbiotic event? Menagerie, but where there is a market there will be specie.

    The challenge faced by microbiologists to explain the period of life on earth called molecular evolution is increased by the cooperative world view. Molecular evolution was a period where cooperation could not be described in anything but chemical terms. Perhaps this is profoundly challenging for those who would make a story for text books that is not based on scientific description or evidence.

    In classic irony, the metabolism of the past is used to brute force sequence genomes with computers and chemistry, in pursuit of cooperative fiction. The science of the surplus will self optimize to exploit the fuel and the agents of exploitation, in highly eusocial fashion will cooperate to consume all fuel until the surplus is exhausted. Fictions like NIH OPEC and SEC will decrease host function until a period of duress will trigger a cataclysm which is a non reproductive exchange of genetic information or change in gene frequency. If you herd sheep and cannot fend off wolves, then modify the wolf through domestication to form a wolf response. Such domestication of potential predators or parasites is a mark of success for any host.

    The same consequences occur in some cold space like computers where 0 and 1 are highly deterministic and identity preserved.

    Temperature is a measure of an objects internal rate of change. This applies to physical ie thermodynamic simulations and cold simulations ie digital. A simul is a shared instant. I have become 2,416 times smarter since then. Lets see how you do on the gaming grid.

  36. Re:Every time Obama opens his mouth... by agnosticnixie · · Score: 1

    Standard of living partially afforded because of social services enacted by corporates and upper class people who knew what they had to fear the most: an angry working class. I wonder whether they still remember.

  37. Another reason to love Windows! by Anonymous Coward · · Score: 0

    Please, M$, quit the OS business...

  38. Can I get a better update host? by Overzeetop · · Score: 2, Insightful

    Microsoft isn't exactly the most trustworthy when it comes to automatically installing anything they want on your computer, which is what you suggest. There doesn't seem to be a checkbox for "only fix security flaws" in Windows Update. I find I still have to sift through the options manually.

    --
    Is it just my observation, or are there way too many stupid people in the world?
    1. Re:Can I get a better update host? by ImYourVirus · · Score: 1

      Microsoft isn't exactly the most trustworthy when it comes to automatically installing anything they want on your computer, which is what you suggest. There doesn't seem to be a checkbox for "only fix security flaws" in Windows Update. I find I still have to sift through the options manually.

      Source?

      --
      Why is common sense called that if it's not common?
  39. The security bulletin in question... by Animaether · · Score: 1

    seeing as the submitted didn't link it (or the 'editors' removed it?)

    http://www.microsoft.com/technet/security/bulletin/MS08-066.mspx

    Just to note from that security bulletin:
    Published: October 14, 2008
    Updated: January 13, 2009

    This has already been patched for some time. Yes, I know, some are wary of installing patches in case they bring on some other issues, so one word of warning: if you use ZoneAlarm (by jove, why? WHY WHY WHY??), be sure to read the 'list of known issues after applying this patch':
    http://support.microsoft.com/kb/956803

  40. Re:Every time Obama opens his mouth... by MindlessAutomata · · Score: 1

    And the only reason the worker has their job and livelihood in the first place is due to Mr. Investor and Mr. CEO, etc.

    If you don't like that system, feel free to start a co-op.

  41. Spear Phishing. by Ungrounded+Lightning · · Score: 1

    Attacks like this, namely single vector and single target, point to a single person or small number of persons who have found some way of using the data to profit themselves. We're probably looking at [description of nerd deleted]

    ORLY?

    Sounds more to me like a "Spear Phishing" operation - in this case espionage against financial institutions.

    Spear-phishing has been used by detective agencies for corporate espionage before. But the tie-in to an existing piece of malware, the highly-developed stealth and anti-competition code, and the targeting of financial information, sounds to me more like the multi-billion-dollar organized crime malware operations than a single operator.

    These groups also have the resources to make use of the sort of information gathered by this tool to suck billions into their own pockets by market manipulation, in addition to the outright theft you'd expect from a single, unconnected, nerd.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  42. Re:AC's like YOU make us other AC's look bad by Anonymous Coward · · Score: 1, Informative

    So much for the ethic of graciously accepting criticism and trying to improve yourself. I guess you prefer the option that entails fostering further ignorance so that you can feel better about yourself.

    So what's your excuse for failing to close your "blockquote" element? You can't spell, promote ignorance in others, *AND* you mark up for shit?

    I don't buy the whole "not his last will and testament" argument either. You try to do things well even when it matters least so that when it does matter, it is easier to excel from practice.

    After all, you don't always know when it'll matter. It's like always using your turn signal even when you don't see anyone else there. If you always saw them (and they, you), there wouldn't be a point to turn signals, would there? It's perhaps those times you don't realize are important that matter most.

  43. No year of Linux on the desktop...again! by rts008 · · Score: 1

    Sadly, the answer is again no. I'm beginning to think that we will never see the year of Linux on the desktop at this rate.
    I've even installed Internet Explorer 6(ies4linux), and not a single drive-by install was successful, but at least attempts were made. *sigh*
    Hell, I've even tried getting some of the latest malware to run with WINE, but no such luck.(did see some fascinating garbled screen effects and some bizarre error messages though!)
    Won't someone think of the penguins?
    *sarcasm off*

    This is one aspect of moving away from MS that I do not miss; running system hogging anti malware software, scanning my computer for infections, updating numerous app's individually, etc.

    I don't know how long *nix will stay under the RADAR of malware authors, but I'm enjoying it while I can!!

    This malware is getting more harmful(money-wise), sneaky, nefarious, and organized at an alarming rate. I'm afraid to imagine how nasty it will be when they do finally take aim at the Apple and *nix computers online.
    That's one of the reasons that I stay current on all of the latest and greatest of this crap. If (or when?) I do have to deal with any of this stuff, I will at least have a clue.
    Another reason is:(hangs head in shame)my wife refuses to be converted to *nix. She has to run MS software at work, and wants to stick with what she was trained and works in, although I frequently find her playing Monkey Bubble, and several other games on my Kubuntu Hardy PC!

    But I guess only one Windows PC out of the six on my home network isn't too bad. I've only had to clean one bunch of malware off of it about two years ago when a friend of ours was visiting, and while we were visiting, her 17 year old daughter was using it online. But that has been the only problem with it.

    --
    Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
  44. Re:AC's like YOU make us other AC's look bad by Anonymous Coward · · Score: 1, Informative
    It's funny how your post on why perfect grammar is not important is a good example of why it is important.

    Your sentences were so poorly constructed that I had to read them several times over just to garner what possible meaning you were trying to express. And you say a lot of things that are, well, plain stupid ('A little news for you/some FYI' says the same thing and needs no emphasis, why repeat it? Also, 'etc. et al' is just redundant at best).

    I agree that perfect grammar is not important when what you write conveys the message you intend it to convey. But even by that measure you need to educate yourself on sentence construction. Until you master the basics of grammar, fighting on a grammatical front it is just fighting out of ignorance.

    Let me summarise my point for your small brain. It is not the occasional annoyance of gramarians that annoy slashdotters about ACs. It is the people who speak out of ignorance - particularly the argumentative ones.

  45. Cue clueless user by Opportunist · · Score: 1

    Hey, that's "good" malware! It gets rid of all those nasty popups, where can I get myself infected?

    (don't laugh. It just ain't funny)

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:Cue clueless user by badkarmadayaccount · · Score: 1

      Actually, for people who don't do finance or anything important on their PCs, that might be an idea...

      --
      I know tobacco is bad for you, so I smoke weed with crack.
  46. Makes the Apple premium seem cheap by jackchance · · Score: 1
    Over at apple.slashdot.org people are whining about paying a few hundred dollar premium for a mac. To me, avoiding trojans and malware is certainly worth that money.

    Ya, i know, i could run linux for a lot cheaper and avoid all the windows virus business also. But for the average user who wants things to *just work* it seems pretty clear that the time saved in not having to deal with crap like this is certainly a good reason to avoid windows.

    Or you could just turn on your firewall and keep your machine up to date.

    --
    1 1 2 3 5 8 13 21 34 55 89 144 233 377 610 987 1597 2584 4181 6765
  47. Re:Every time Obama opens his mouth... by Msdose · · Score: 1

    As opposed to bankers, who don't even invest in the production, but only parasite off it.

  48. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 0

    Short sighted.

    Your comment infers that investors are useless. Have you ever started a business? Have you ever tried expanding a business? If not, give it a shot some time with no capital. Sure it can be done, it is possible to bootstrap, but it's far from the easiest way.

    Investing has been such a successful mechanism of socio-economic development for so long that we'd go backwards pretty quickly without it.

  49. For a girl in training by Anonymous Coward · · Score: 0

    "Girlintraining" - how's that working out for you?

    I think you have a long way to go. Girls, as judgmental as they may seem, are a little more rational than you appear to be. I'm guessing: 63 years old, divorced, stay at home all day in your underwear, and spending your time posting crap on the internet. Close?

    AC

  50. Use the farce by Anonymous Coward · · Score: 1, Insightful

    Your lack of experience disturbs me.

    4 years of programming? I think many of us reached 4 years before the age of 10.

    "Caught 2 people on site who attempted to access information without authorization..." gee that means you firm didn't do a good job after the first person.

    Classified, schmlassified. One could work with DEA or NSA, SAIC or LANL, and still be doing classified work. Let's be honest: that doesn't mean it's important. Everybody and his brother has had a TS/SI clearance, bucko. Don't embarrass the real professionals who don't go around trying to impress people on Slashdot.

    AC

  51. the culprit by Anonymous Coward · · Score: 0

    Well, looks like Singularity needs money again. Judging by the activity on Google, this time it's building an oceanic base.

  52. Re:AC's like YOU make us other AC's look bad by Cowmonaut · · Score: 1

    These two AC's are owning you pretty hard dude, but I just had to point out that writing poorly is *not* a "writing style".

  53. indemnification against data theft .. by viralMeme · · Score: 1

    What indemnification do the brokerages and their customers get in cases such as this.

  54. Re:Every time Obama opens his mouth... by Ray · · Score: 1

    I agree that "investors" have allowed the companies they invested in to produce the US middle class but there are no "investors" in today's stock market, only "traders" and traders produce wealth only for themselves (maybe). All a trader does is bet he can find some sucker to buy some crap he bought for more money than he paid for it. The exact nature of the crap is irrelevant.

  55. outsourcing the solution by viralMeme · · Score: 1

    "We're probably looking at someone .. 5-7 years experience programming"

    I doubt that the people who wrote the rootkit are the ones benefiting from it, more likely it was outsourced. As to how you tell all this from linked to article, maybe you should be doing psychic readings on the television ..

  56. Where that PhD in English? by Anonymous Coward · · Score: 0

    "These two AC's are owning you pretty hard dude, but I just had to point out that writing poorly is *not* a "writing style"." - by Cowmonaut (989226) on Wednesday March 04, @10:05AM (#27064491) Homepage

    Oh, sure, right (do you think you are fooling anyone posting as a registered account this time to support yourself)? It happens here, quite a lot (nerdy little geeks think they're smart, until they meet someone smarter) -> http://slashdot.org/comments.pl?sid=1147437&cid=27066233 (I just caught "End of Days", one of your users here, yesterday, in admitting he does just what I wrote (i.e.-> Using multiple registered accounts to support himself here, lol, & even ac ones also))

    I can make the assumption you are just another one of those kinds of multiple account + 'self supporting' (hilarious) users that infest this website, ruining it. Good thing morons of THAT 'calibre' are usually stupid, and easily caught (as you have been or would be if I pushed it as I did w/ he yesterday).

    AND, once more - is reading comprehension an issue over there also??

    Hey - Hooked on Phonics may be needed to help you out, simply because this isn't ENGLISH CLASS, it's the IT section and you are clearly unable to distinguish that much via reading the English language...

    You're off topic.

    APK

    P.S.=> TOO easy... &, where's your PhD in English of yours which illustrates even a tiny right to critique anything about it (though you are off topic). After all, without that, you have cannot prove enough mastery of said language to be even beginning to have the right to criticize others!... that type usually is SO weak in this area (IT), that all they have is such off topic b.s., & we all know it... apk

  57. Pot calling the kettle black? by Anonymous Coward · · Score: 0

    Can't take critique, self-appointed critic, though you dish it out yourself?

    "So much for the ethic of graciously accepting criticism" - by Anonymous Coward on Wednesday March 04, @12:57AM (#27061255)

    Once more: Is reading comprehension an issue over there?

    Hooked on Phonics may be needed for you, as this obviously (to anyone that can read English that is) isn't ENGLISH CLASS, it's the IT section which is clearly noted on the start page of this thread...

    (As if the topic material doesn't indicate that much... and, they're critiquing anyone's English skills? LOL: These 'ac's' can't even read, thus, my init. post is correct: They're off topic... & imo, rather weak in this field of endeavor because they're undeniably off topic...

    I.E.-> Can you show anyone reading here where you once contributed useful information on this malware & how to stop it? Not that I noticed... and, you certainly aren't even demonstrating you can read, because this forums section is about computing topics (not English).

    I will right here -> http://www.tcmagazine.com/forums/index.php?s=4480cdfb1e9cbe6c2729528f8c75dff7&showtopic=2662

    See the "VIRUS REMOVAL SECTION" there... it gives a generic set of tools/tips/tricks/techniques in an article I authored that got me paid $100 over @ PCPitstop for winning their monthly contest, and was made an "ESSENTIAL GUIDE/sticky thread" there (as it was on 15/20 forums it is one, to the tune of 200,000++ views in 1 yr.'s time as well as often being rated "5/5 stars", & being the most viewed on forums that have been around for years to a decade++, in that short time frame also)...

    The tips/tricks/techniqes there can be used on most any kind of malware to neutralize it, with tools you own already &/or completely free ones... I note that because unlike you? I am offering help via that set of techniques.

    APK

    P.S.=> TOO easy... &, where's your PhD in English to show you have enough mastery of said language to be even beginning to have the right to criticize others? You have no proof of mastery of writing english yourself, so all your b.s. is just mere opinion (from a wannabe English Prof., operating under his "delusions of grandeur", lol)... apk

  58. The wonderful wonderful thing about NIGGERS by Anonymous Coward · · Score: 0

    The wonderful thing about niggers
    Is niggers are wonderful things!
    Their kinkytops are pulled straight with irons
    Their footpumps make them all spring!
    They're bouncy, trouncy, flouncy, pouncy
    Fun, fun, fun, fun, fun!
    But the most wonderful wonderful thing about niggers is.....
    I'm not one.

  59. Re:Every time Obama opens his mouth... by Anonymous Coward · · Score: 0

    Don't you mean the fruits of other people's labor. Last time I checked investors don't actually produce anything.

    they're not even investors - they're speculators

  60. There's a new version of antivirus 2009 that works by Anonymous Coward · · Score: 0

    Antivirus 2010 has my Windows Millienium Edition PC protected from rootkits.

  61. Is this the English Grammar section of /.? No by Anonymous Coward · · Score: 0

    "It's funny how your post on why perfect grammar" - by Anonymous Coward on Wednesday March 04, @01:02AM (#27061299)

    It's funny how you fail to provide proof of your expertise & a supposedly complete mastery of English via a PhD in it. That said: So what makes YOU an expert in English writing, or someone to listen to at all on the subject, period?

    Nothing.

    So much for your "self-titled" delusions of grandeur, because I'd wager you are not an English instructor at any level. Above all else though, no one asked for your blatantly off topic help!

    (Thus, if you cannot determine the meaning of words and phrases in the context which they are used in, you may have a problem yourself like dyslexia - that's all I can determine thusfar & you provided the data (or rather, lol, lack the PhD in English of yours as evidence data on your part that you are some expert in English)).

    English Professor wannabe #2 (really same ac as above, now playing 'smart' here, lol, trying to fool us he has multiple supporters) to the rescue:

    Reading comprehension an issue over there? Hooked on Phonics may be needed, & this isn't ENGLISH CLASS, it's the IT section... ok??

    (Give us a break - you're off topic & obviously too weak in this technology to contribute useful information... can you show anyone reading here where you once conributed useful information on this malware & how to stop it? Not that I noticed... thus, you truly are off topic).

    I.E.-> Can you show anyone reading here where you once contributed useful information on this malware & how to stop it? Not that I noticed... and, you certainly aren't even demonstrating you can read, because this forums section is about computing topics (not English).

    (No. You clearly cannot.)

    I will right here -> http://www.tcmagazine.com/forums/index.php?s=4480cdfb1e9cbe6c2729528f8c75dff7&showtopic=2662

    See the "VIRUS REMOVAL SECTION" there... it gives a generic set of tools/tips/tricks/techniques in an article I authored that got me paid $100 over @ PCPitstop for winning their monthly contest, and was made an "ESSENTIAL GUIDE/sticky thread" there (as it was on 15/20 forums it is one, to the tune of 200,000++ views in 1 yr.'s time as well as often being rated "5/5 stars", & being the most viewed on forums that have been around for years to a decade++, in that short time frame also)...

    The tips/tricks/techniqes there can be used on most any kind of malware to neutralize it, with tools you own already &/or completely free ones... I note that because unlike you? I am offering help via that set of techniques.

    APK

    P.S.=>

    "Let me summarise my point for your small brain" - by Anonymous Coward on Wednesday March 04, @01:02AM (#27061299)

    AGAIN (to sink in past your ADD &/or dyslexia, because otherwise it's evidence of skimming or outright stupidity on your part):

    Is this English class? No, it's the IT section here. YOU can't even tell you are off topic, lol... "Hooked on Phonics", &/or ADD or DYSLEXIA meds may be the solution for YOU, so consider using it. "See Dick and Jane Run"... that's about your speed apparently, so give up the delusions of grandeur, because you obviously lack an accredited educational institution's training in English that establishes at least some form of professionalis &/or expertise as well as even a small right to critique the writings of others (that going to get you paid by the way for doing it? LOL, no!), and it is highly doubtful you are an English instructor at any level, much less a prof. of this language.

    (So quit avoiding what was asked of you: Tell us, just where is that PhD in English that qualifies you as a critic and expert in it? Oh that's right: You have no such certification of expertise do you? Of course not!)

  62. Malware began as parasite, evolving into symbiote? by zooblethorpe · · Score: 1

    This might be stretching things a bit, but might we see a parallel evolutionary pattern at work here? The first malware started out in a purely parasitic mode, using host resources without regard to the health of the host. We are now seeing the emergence of less-virulent malware (at least with regard to computer resources, not necessarily less virulent with regard to impact on victims).

    Might we soon discover malware that is even less virulent, and possibly even symbiotic, in terms of providing side *benefits* to those infected? Conceivable circumstances might involve a trojan that is purely for setting up a botnet, with the trojan payload aggressively cleaning the host system and entailing no more negative impact on the victim than the loss of bandwidth and CPU capacity when the botnet is being actively used...

    Just curious where this might all lead.

    Cheers,

    --
    "What in the name of Fats Waller is that?"
    "A four-foot prune."
  63. Re:AC's like YOU make us other AC's look bad by Anonymous Coward · · Score: 0

    For people that complained about others' writing here you all seemed to have been able to understand and respond to those you criticize. What I found rather amusing is that you all talk a great deal about things that are blatantly off topic and in the typical slashdot "I will post as anonymous to make myself appear to have supporters ontop of my registered account" style tactics, and an example of it occurring here on slashdot where The End of Days who is a user here http://slashdot.org/comments.pl?sid=1147437&cid=27056793 was caught doing it and admitted it in that url. Based on your transparent gang up tactics using ac accounts you english professor types here are all no better and definitely off topic because this is not an english class and is on the subject of computers. Slashdot has a great deal of losers here who have nothing better to do than be grammar and spelling nazis. What a waste of life.

  64. Is this the irony + spelling & grammar forums? by Anonymous Coward · · Score: 0

    Do grammar and spelling critiques solve tech issues here and is this section of the forums about writing or irony? No on all accounts noted. You're off topic and that's the real irony here because it's clear you are most definitely off topic, not those you mod down in effete retaliation.