Browser-jackers upset security pundits

Similar to virus technology

Security experts compared PassThisOn's code to the KakWorm virus, which uses a "known security vulnerability in Outlook Express...that creates a file 'kak.hta' to the Windows Startup directory," according to a description of the virus.

The difference, specialists say, is that PassThisOn's code relies on people sending the code to friends. "It's similar to the KakWorm, but instead of it automatically mailing itself to everyone in your address book, its service is relying on everyone to send the code to their friends," High said.

"It's just expecting users to pass along these cute comics to each other. It's like a spam virus, except that humans are the ones sharing the code," he added.

Adam Hale, a software professional who discovered the code in the last couple of weeks, said that consumers using Windows 98 SE, the last version of Windows 98 before the new Windows Millennium Edition software was released, are using a browser version that is susceptible to the exploit.

Hale downplayed the significance of the home page switch, saying the real danger lies in the browser security hole, which could create the opportunity for more damaging mischief.

"What scares me is not that (Wallace) is changing my home page, but the idea that he's hacking into my machine and placing a file there," Hale said. "He could put anything, including a virus, in there."

Advertisement

Talkback 2 comments

    Geez, if I did that to them, I ...Anonymous -- 26/02/01

    Geez, if I did that to them, I would be prosecuted for hacking. Guess the laws written the the people don't apply to Companies.

    Have a Nice Penguin Day..!
    R Spinks

    I agree with Robert Spinks. H ...Anonymous -- 27/02/01

    I agree with Robert Spinks. Hacking is hacking regardless of the purpose. The same laws should apply to all.

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Phil Dobbie A guide to the future of the internet
    Last week we looked at the history of the internet in Australia. It's been around for 20 years and changed our lives in so many ways. Imagine what it could do given another 20 years.
  • Array Carelessness busts Linux security
    No operating system can ever properly protect a computer from trojans as long as users continue to do silly things. Just because Linux is immune to your standard drive-by viruses it does not mean that it can escape trojan horses.
  • Array Sun shining on Ajnaware
    Graham Dawson talks about the future of iPhone app development and augmented reality.
  • More blogs »

Tags

Back to top

Featured