Microsoft DRM used to install spyware
Posted: Wed Jan 12, 2005 11:25 am
http://www.eweek.com/article2/0,1759,1749948,00.asp
Archived topic from Anythingforums, old topic ID:1644, old post ID:21899
http://www.theregister.co.uk/2004/12/31/p2p_adware_threat/Hackers are using the newest DRM technology in Microsoft's Windows Media Player to install spyware, adware, dialers and computer viruses on unsuspecting PC users.
Security researchers have detected the appearance of two new Trojans, Trj/WmvDownloader.A and Trj/WmvDownloader.B, in video files circulating on P2P (peer-to-peer) networks.
According to Panda Software, both Trojans take advantage of the new Windows anti-piracy technology to trick users into downloading spyware and adware applications.
It seems wma and wmv files are the vehicles for this as these filetypes are the only filetypes i know of that can use Microsoft DRM. MP3s and other filetypes should be safe from this. We'll probably also see if something similar can be done to Apple's DRM or other DRM schemes in general, but for right now, it looks like a Microsoft issue. Enjoy your windows media!Overpeer grabbed headlines in 2002 for its work infecting P2P networks with garbled music at the behest of some major music labels. It now looks like the company - a subsidiary of Loudeye - is sending out contaminated files that launch numerous ad-filled browser windows and that try to take over a user's homepage. Loudeye is standing by the practice, saying P2P users are getting what they deserve.
...
"A reader initially alerted PC World to an ad-laden Windows Media Audio file, titled 'Alicia Keys Fallin' Songs In A Minor 4.wma,'" the magazine wrote. "We then found two other WMA files and two Windows Media Video files that had been similarly modified."
Archived topic from Anythingforums, old topic ID:1644, old post ID:21899
