Weird Acting Trojan.

January 4, 2009

Not quite sure what to make of it, I will let you draw your own conclusions. Very, very interesting.

A new trojan popped up at several torrent sites a few weeks ago, one that blocks access to The Pirate Bay and Mininova, while informing its victims that “downloading is wrong.” The trojan edits the hosts file on Windows machines, and redirects the BitTorrent sites to localhost, making them impossible to load.

The trojan in question (Troj/Qhost-AC) identified by anti-virus company Sophos, is a rather unusual one. It doesn’t seem to install spyware or traditional malware, but instead blocks access to the two most popular BitTorrent sites.

Aside from blocking the three sites in question, the trojan caused popups and even played a sound file saying that “downloading is wrong”. The bad torrent was removed from The Pirate Bay soon after users commented that the key generator didn’t work, but it is safe to assume that this is not the first and only attempt to spread a trojan like this one.

The question remains, who is behind this? While some might argue that the MPAA, RIAA or other anti-piracy advocates might be the source, we think it more likely that the attack originates from a relatively innocent prankster targeting pirates.

 

The Whole Article

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: