<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
    xmlns:dc="http://purl.org/dc/elements/1.1/"
     xmlns:admin="http://webns.net/mvcb/"
     xmlns:content="http://purl.org/rss/1.0/modules/content/"
     xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
	<channel>
	<title>MetaFilter posts tagged with trojan</title>
	<link>http://www.metafilter.com/tags/trojan</link>
	<description>Posts tagged with 'trojan' at MetaFilter.</description>
	<pubDate>Thu, 27 Mar 2008 20:34:53 -0800</pubDate> <lastBuildDate>Thu, 27 Mar 2008 20:34:53 -0800</lastBuildDate>

	<language>en-us</language>
	<docs>http://blogs.law.harvard.edu/tech/rss</docs>
	<ttl>60</ttl>
	<item>
		<title>Super-targeted spear phishing attacks</title>
		<link>http://www.metafilter.com/70295/Supertargeted%2Dspear%2Dphishing%2Dattacks</link>
		<description> The recent cyber attacks on &lt;a href=&quot;http://www.washingtonpost.com/wp-dyn/content/article/2008/03/21/AR2008032102605.html&quot;&gt;pro-Tibet groups&lt;/a&gt; in the U.S. (&lt;a href=&quot;http://www.f-secure.com/weblog/archives/00001406.html&quot;&gt;attack details&lt;/a&gt;, &lt;a href=&quot;http://isc.sans.org/diary.html?storyid=4177&quot;&gt;technical data&lt;/a&gt;) and on the &lt;a href=&quot;http://www.washingtonpost.com/wp-dyn/content/article/2008/03/20/AR2008032003193.html&quot;&gt;Save Darfur&lt;/a&gt; Coalition, among &lt;a href=&quot;http://www.scmagazineus.com/Olympic-spam-carries-malicious-code-MessageLabs/article/107232/&quot;&gt;others&lt;/a&gt;, have managed to catch the attention of some in the mainstream media. 
Such super-targeted &lt;a href=&quot;http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci1134829,00.html&quot;&gt;spear phishing&lt;/a&gt; attacks have been on the &lt;a href=&quot;http://64.233.169.104/search?q=cache:xywpL9uO1CsJ:www.ci.hillsboro.or.us/Police/documents/Argus/SpearPhishing-11-03-05.pdf&quot;&gt;rise&lt;/a&gt; for several years, and have become an important &lt;a href=&quot;http://resources.zdnet.co.uk/articles/features/0,1000002000,39365959,00.htm&quot;&gt;tool&lt;/a&gt; for corporate &lt;a href=&quot;http://www.computerworld.com/action/article.do?command=viewArticleBasic&amp;articleId=9045564&quot;&gt;espionage&lt;/a&gt; and military &lt;a href=&quot;http://www.fcw.com/online/news/97186-1.html&quot;&gt;infiltration&lt;/a&gt; attempts. &lt;a href=&quot;http://govexec.com/dailyfed/0807/082207mm.htm&quot;&gt;Teaching users&lt;/a&gt; to recognize such attack emails is probably the most effective deterrence, as &lt;a href=&quot;http://www.infoworld.com/article/07/11/09/Zero-day-specialists-hooked-on-spear-phishing_1.html&quot;&gt;technology&lt;/a&gt; solutions have shown to not be particularly effective. Some companies and government agencies even conduct &lt;a href=&quot;http://online.wsj.com/public/article/SB112424042313615131-z_8jLB2WkfcVtgdAWf6LRh733sg_20060817.html&quot;&gt;sting operations&lt;/a&gt; to ferret out which internal users fail the test, targeting them for additional training. Thanks to &lt;a href=&quot;http://www.metafilter.com/user/12845&quot;&gt;homunculus&lt;/a&gt; for &lt;a href=&quot;http://www.metafilter.com/70026/Trouble-on-the-Roof-of-the-World#2056111&quot;&gt;encouraging&lt;/a&gt; me to post on this. </description>
		<guid isPermaLink="false">tag:metafilter.com,2008:site.70295</guid>
		<pubDate>Thu, 27 Mar 2008 20:34:53 -0800</pubDate>
		<category>attack</category>
		<category>cyber</category>
		<category>deterrence</category>
		<category>espionage</category>
		<category>malware</category>
		<category>phishing</category>
		<category>spearphishing</category>
		<category>Tibet</category>
		<category>trojan</category>
		<dc:creator>gemmy</dc:creator>
	</item>
      <item>
		<title>Another Mac OS X Trojan</title>
		<link>http://www.metafilter.com/49232/Another%2DMac%2DOS%2DX%2DTrojan</link>
		<description>&lt;a href="http://it.slashdot.org/article.pl?sid=06/02/16/1322209"&gt;Barbarians are at the gates, testing the locks again.&lt;/a&gt; Mac OS X users beware: A file supposedly containing pictures of Mac OS X 10.5, &lt;a href=&quot;http://www.macrumors.com/pages/2006/02/20060216005401.shtml&quot;&gt;actually does other things&lt;/a&gt;.  Lots of info and links at this first link. Here&apos;s the &lt;a href=&quot;http://forums.macrumors.com/attachment.php?attachmentid=41004&amp;d=1140065936&quot;&gt;disassembly of the executable&lt;/a&gt; (it&apos;s just a plain text file) and &lt;a href=&quot;http://www.ambrosiasw.com/forums/index.php?showtopic=102379&quot;&gt;some notes on the application&lt;/a&gt; which comes to this conclusion: &lt;em&gt;&quot;In the end, it doesn&apos;t appear to actually do anything other than try to propagate itself via iChat, and unintentionally prevent infected applications from running

It seems that this is more of a &quot;proof of concept&quot; implementation that could be utilized to actually do something in the future, depending on how successful it is, or it was simply done to garner attention/press. Which I&apos;m sure it&apos;ll get.
&quot;&lt;/em&gt;

Might be a good idea to check out &lt;a href=&quot;http://www.peachpit.com/articles/article.asp?p=343277&amp;rl=1&quot;&gt;a Mac OS X security primer&lt;/a&gt;.  </description>
		<guid isPermaLink="false">tag:metafilter.com,2006:site.49232</guid>
		<pubDate>Thu, 16 Feb 2006 06:03:51 -0800</pubDate>
		<category>macosx</category>
		<category>trojan</category>
		<category>virus</category>
		<dc:creator>Brandon Blatcher</dc:creator>
	</item>
      <item>
		<title></title>
		<link>http://www.metafilter.com/13515/</link>
		<description>&lt;a href="http://www.theregister.co.uk/content/4/23532.html"&gt;File sharing apps may contain a trojan.&lt;/a&gt; It seems some versions of Grokster, Limewire and reportedly Kazaa contain a trojan called W32.DlDer Troja. Whilst I am aware that these apps often install &lt;a href=&quot;http://www.scumware.com&quot;&gt;scumware&lt;/a&gt;, this seems more serious.  </description>
		<guid isPermaLink="false">tag:metafilter.com,2002:site.13515</guid>
		<pubDate>Thu, 03 Jan 2002 09:39:50 -0800</pubDate>
		<category>spyware</category>
		<category>trojan</category>
		<category>virus</category>
		<dc:creator>viama</dc:creator>
	</item>
      <item>
		<title></title>
		<link>http://www.metafilter.com/12704/</link>
		<description> In lieu of the &lt;a href=&quot;http://www.metafilter.com/comments.mefi/12590&quot;&gt;Magic Lantern&lt;/a&gt; thread, &lt;a href=&quot;http://www.politechbot.com/p-02851.html&quot;&gt;Symantec will be ignoring the FBI trojan&lt;/a&gt;.  [taken from &lt;a href=&quot;http://slashdot.org/article.pl?sid=01/11/28/173201&amp;mode=nested&amp;threshold=1&quot;&gt;./&lt;/a&gt;]  </description>
		<guid isPermaLink="false">tag:metafilter.com,2001:site.12704</guid>
		<pubDate>Wed, 28 Nov 2001 18:35:04 -0800</pubDate>
		<category>backdoor</category>
		<category>computers</category>
		<category>FBI</category>
		<category>Nortons</category>
		<category>security</category>
		<category>Symantec</category>
		<category>trojan</category>
		<dc:creator>hobbes</dc:creator>
	</item>
      <item>
		<title></title>
		<link>http://www.metafilter.com/11172/</link>
		<description> Has anyone set up an online home - museum? - where &apos;Internet Icons&apos; can be stored safely for future generations? If not shouldn&apos;t they? I nominate this &lt;a href=&quot;http://www.cl.cam.ac.uk/coffee/coffee.html&quot;&gt;coffee pot&lt;/a&gt;, this &lt;a href=&quot;http://www.deuceofclubs.com/moj/mojave.htm&quot;&gt;sadly missed phonebox&lt;/a&gt; and maybe even &lt;a href=&quot;http://www.mahircentral.com/&quot;&gt;this guy.&lt;/a&gt; Are there any others which you think would qualify?  </description>
		<guid isPermaLink="false">tag:metafilter.com,2001:site.11172</guid>
		<pubDate>Sat, 06 Oct 2001 13:40:12 -0800</pubDate>
		<category>coffee</category>
		<category>icons</category>
		<category>internet</category>
		<category>mojave</category>
		<category>phonebooth</category>
		<category>pot</category>
		<category>room</category>
		<category>trojan</category>
		<dc:creator>Duug</dc:creator>
	</item>
      <item>
		<title></title>
		<link>http://www.metafilter.com/9167/</link>
		<description>&lt;a href="http://securityportal.com/research/virus/profiles/w32sircam.html"&gt;I send you this file in order to have your advice.&lt;/a&gt; The Sircam worm is spreading at an unbelievable rate, with two interesting bonuses.  First, it mass-mails itself to e-mail addresses located in browser cache files (so webloggers with e-mail addresses on their sites are vulnerable).  Second, it infects and attaches a random document to the e-mail.  If you&apos;re careful, this makes it the most entertaining worm yet.  &lt;FONT SIZE=&quot;-2&quot;&gt;(More inside...)&lt;/FONT&gt;  </description>
		<guid isPermaLink="false">tag:metafilter.com,2001:site.9167</guid>
		<pubDate>Sat, 21 Jul 2001 08:46:14 -0800</pubDate>
		<category>email</category>
		<category>sircam</category>
		<category>trojan</category>
		<category>windows</category>
		<category>worm</category>
		<dc:creator>waxpancake</dc:creator>
	</item>
      <item>
		<title></title>
		<link>http://www.metafilter.com/2093/</link>
		<description>&lt;a href="http://www.theregister.co.uk/content/1/11290.html"&gt;&apos;Serbian Badman&apos; virus not so bad after all.&lt;/a&gt; &lt;i&gt;The Register&lt;/i&gt; is calling it a hoax in that a DDoS attack just isn&apos;t possible with the alleged virus.  </description>
		<guid isPermaLink="false">tag:metafilter.com,2000:site.2093</guid>
		<pubDate>Mon, 12 Jun 2000 15:11:15 -0800</pubDate>
		<category>ddosattack</category>
		<category>greatbritian</category>
		<category>serbianbadman</category>
		<category>theregister</category>
		<category>trojan</category>
		<category>virus</category>
		<dc:creator>hijinx</dc:creator>
	</item>
      
	</channel>
</rss>


