OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andrew McClymont (andrewmcclymontd-link.net)
Date: Wed Feb 06 2002 - 14:10:50 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I just found out a folder named "My shared folder" under the KaZaA
    installation folder.

    Inside "My shared folder" there were various KaZaA installshield
    packages (exe files).

    Now, the people at FastTrack promotes their engine as a distributed way
    to send files to end users. This is seen whe you download KaZaA, you get
    a little exe (500 k) that downloads the full KaZaA client from one of
    its users, I would guess, from the "My shared folder".

    What happens if I infect the files under "My shared folder" with a virii
    or some trojan, every user that gets their KaZaA client from my computer
    gets screwed, right? And then, the victim himself will be sharing the
    KaZaA client infected to new victims.

    Just wondering... Have a nice day!!
    -Andrew McClymont