Multiplatform Java botnet spotted in the wild (via The Command Line) http://coachfactorystore-bag.weebly.com"The original propagation vector of IncognitoRAT is a Windows executable, but apparently it was created using the tool JarToExe, which includes, among other features, the ability to convert .jar files into .exe files, to add program icons and version information, and protect and encrypt Java programs.
Once the .jar file is converted, it is executed and downloads a number of Java-based libraries that allow the attacker to remotely control the keyboard and mouse of the affected computer, to play MP3 files and videos, to record images taken by the computer's webcam, and to send stolen information to a predefined email account.
2012年6月5日星期二
IncognitoRAT Java-based, cross-platform botnet is
Cory Doctorow at 2:34 am Monday Cheap NFL JerseyCheap NFL Jersey, May 9
IncognitoRAT is the first known Java-based, cross-platform botnet. It can infect Java virtual machines on MacOS and Windows machines, as well as iPads and iPhones. Presumably, GNU/Linux machines are vulnerable, too, but this isn't mentioned in the article.
订阅：
博文评论 (Atom)
没有评论:
发表评论