main

US Military scours Windows systems for hacker back doors

me101   on 16 March 2002 - 23:35 · no comments & 66 views

Advertisement (Why?)
The United States Army and Navy are conducting a high-priority security review of their Microsoft [NASDAQ:MSFT] Windows systems for the presence of an unauthorized remote-control program, sources familiar with the investigation have confirmed.

An unclassified memo, sent Mar. 6 by the Navy's Computer Incident Response Team (NAVCIRT), warned Navy computer administrators to scan their Windows systems for evidence of a popular commercial software program called RemotelyAnywhere.

"NAVCIRT (Navy's Computer Incident Response Team) received several computer incident reports involving the installation of RemotelyAnywhere on compromised computer systems which in turn enables scanning, probing, and compromising of additional DOD systems," said the memo, a copy of which was received by Rob Rosenberger, an independent virus expert who consults to the military on information security matters.

The Army memo, sent out on the 13th March, distributed by e-mail and designated High Importance, warned information assurance managers (IAMs) that the remote access tool "may be sitting on our systems, waiting to be launched." The memo instructs Army system administrators to search all Windows computers for the presence of files that "are evidence of system compromise."

A representative of Wisconsin-based Binary Research International, which distributes RemotelyAnywhere, said military investigators contacted the company last week for assistance after an undisclosed number of copies of the program were discovered on Department of Defense computer systems. The attackers are believed to have obtained illegally licensed or "cracked" copies of RemotelyAnywhere, which costs $99 for a single-user license, according to Szopinski.

According to product documentation, RemotelyAnywhere is developed by Hungary-based 3am Labs. The software acts as a HTTP server and allows remote users to access files and manage a computer remotely through a Web browser. The program includes a configurable "listener" function that waits for connections on TCP ports 2000 and 2001 by default. To install RemotelyAnywhere on Windows NT, 2000, or XP systems, users must have system administrator privileges, Binary spokesman Jim Szopinski said.

News source: Newsbytes
View: RemotelyAnywhere and download a copy (v4.0, 4.56mb)


Griffin said the new indie-promotion service was a business decision, and any legal by-product was "not the intent for doing it." StreamCast, along with two other file-swapping companies, is being sued by the big record labels and Hollywood movie studios in a federal court in Los Angeles.

Morpheus has been in the spotlight in recent weeks after its file-swapping network, once deemed nearly impossible to shut down, went black almost overnight. The mystery sent ripples of confusion and anger through the Morpheus audience, which numbered in the tens of millions.

Griffin said that his software and its users were being "attacked," and he pointed the blame at the Dutch software company that had created the peer-to-peer technology that served as the core of the Morpheus program. That company, Kazaa, later said StreamCast hadn't paid its software licenses.

StreamCast's new promotion plan is scheduled to kick off April 1, at the same time it releases a long-awaited new version of its Morpheus software. The current "Preview Edition," which taps into the open-source Gnutella file-trading network, was rushed out early this month to replace the mysteriously defunct previous version.

The company will launch a new MusicCity.com independent music promotion page, initially featuring 10 artists including 1980s one-hit-wonder and Silicon Valley entrepreneur Thomas Dolby, Griffin said.

Post a comment · Send to friend Comments · There are no additional comments

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)