private-sector keystroke logger...

Derek Atkins warlord at MIT.EDU
Tue Nov 27 15:24:26 EST 2001


Hrm, how about a worm with a built-in HTTP server that installs itself
on some non-standard port, say TCP/28462 (to pick one at random)?

-derek

Steve Bellovin <smb at research.att.com> writes:

> It's not just the FBI, of course.  There are press reports this morning 
> of a new worm, Badtrans.b, that not only leaves behind a Trojan horse, 
> it includes a keystroke logger.  Now, that particular leakage isn't a 
> major concern, since it emails the stolen text to an account that's now 
> been shut down, but I'm sure we can all think of other ways to export 
> information like that.
> 
> 		--Steve Bellovin, http://www.research.att.com/~smb
> 		Full text of "Firewalls" book now at http://www.wilyhacker.com
> 
> 
> 
> 
> 
> ---------------------------------------------------------------------
> The Cryptography Mailing List
> Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord at MIT.EDU                        PGP key available



---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com




More information about the cryptography mailing list