Select Page

Antivirus programs do not see the latest Trojans either

Antivirus software companies have pointed out that two Trojans have appeared that also use Sony DRM software to infect PCs.

Both Sophos and F-Secure have reported that they have discovered Trojans that also take advantage of the opportunities offered by Sony's recently outrageous Digital Rights Management (DRM) software. This is because Sony's application allows malware to hide from even anti-virus software.

The Trojans discovered by Sophos and F-Secure are very similar in terms of their operation and the techniques used. The Stinx-E Trojan reported by Sophos is spread primarily in emails that usually have a file called Article + Photos.exe attached. At first glance, the letters appear as if they came from an English business magazine. According to Sophos, Stinx-E is very effective in exploiting the potential of the software included with each Sony CD. Graham Cluley, a Sophos expert, said the Trojan allows attackers to gain unauthorized access to infected systems. According to the expert, the Trojan can hide very effectively through Sony's software. Even antivirus software can only provide protection against it when it gets on your computer. Once the Trojan has infected your PC, in many cases the antivirus is helpless, as Sony's software completely hides the malware.

F-Secure has reported a trojan called Breplibot.b, which also uses Sony software to hide it. The Trojan spreads as $ sys $ drv.exe and installs itself on selected PCs. It then opens a backdoor through IRC that allows attackers to perform unauthorized operations on infected computers.

About the Author