Could your computer be a criminal? PCs hijacked to send spam, serve porn, steal credit cards

MSNBC website ^ | 7-15-03 | Bob Sullivan

[M. Peach]

PCs hijacked to send spam, serve porn, steal credit cards

By Bob Sullivan MSNBC

July 15 — One thousand home computers hijacked and used to serve up pornography. Perhaps tens of thousands co-opted by the “SoBig” virus, many of them turned into spam machines. Hundreds of other home computers loaded with secret software used to process stolen credit cards. If your biggest computer crime fear was lost or stolen files, think again: Someone may be using your PC to commit crimes.

A CURIOUS SPAM mail went out and disappeared without much fanfare on June 25. Playing on a familiar prank, the e-mail urged recipients to visit “Windows-update.com” and download a security fix for their computers. Those who fell for the ploy were tricked into downloading a Trojan horse program. The malicious software steered the victim computer into an Internet Relay Chat room, where a computer criminal playing the part of the Pied Piper awaited to issue instructions to the now enslaved PC.

[M. Peach]

It's important to keep current on computer safety.

[Support Free Republic]

She wants to look her best for her subjects.
>	Make a fashion statement. Donate Here By Secure Server Or mail checks to FreeRepublic , LLC PO BOX 9771 FRESNO, CA 93794 or you can use PayPal at Jimrob@psnw.com
STOP BY AND BUMP THE FUNDRAISER THREAD- It is in the breaking news sidebar!

[drlevy88]

Can a computer be a criminal? No more than a gun can. (This is a test of posting from Linux)

[KeyWest]

Spybot- excellent and free. Cleans up this sort of problem.

[goldstategop]

The best way to ensure complete computer security is to keep it turned off and disconnected from the Internet. :)

[R. Scott]

…the e-mail urged recipients to visit “Windows-update.com” and download a security fix for their computers.

This showed up as a popup yesterday – I guess they’ve changed MO. It didn’t look kosher, so I didn’t bother with it.
It did remind me to turn on the popup filter.

[R. Scott]

I use a fiber optic cable connection, so I’m always on – but when not in use my computer is turned off.

[goldstategop]

People get it confused with Microsoft's legitimate Windows Update site. Then again Redmond doesn't send out e-mail reminders to get Windows updated.

[Larry Lucido]

It's important to keep current on computer safety.

"Current off" might be more effective.

[Xenalyte]

Could your computer be a criminal?

It's possible. I can't watch it every minute.

[Wolfie]

Once mine came home with alcohol on its breath. I grounded it for a week.

[Xenalyte]

Tough love is sometimes the only solution. I've had to lock mine in a room with just a mattress and a change of clothes . . . oh, wait, that was my little brother, not my PC.

[Calpernia]

Thanks for the round about ping.

[Calpernia]

Ping

[Chancellor Palpatine]

How would you not know if your hard drive was spinning, and how would your ZA or other firewall miss the incomings?

[taxcontrol]

........how would your ZA or other firewall miss the incomings?

---

Most firewalls do not check emails. Many virus scanners do not look for this type of parasite. In short, it is the classic 2 phase attack.

1) Send the target a ok looking email or popup and get them to run / open it.

2) When the target executes the parasite allows the attacker access into the system

Firewalls do not stop this because the traffic is coming from the "safe" network.

[Tamzee]

Thanks for the FYI :-)

[M. Peach]

"Once mine came home with alcohol on its breath. I grounded it for a week."

One time at band camp.....

[Search4Truth]

"Spybot- excellent and free. Cleans up this sort of problem."

Spybot offers no protection from the problems described in the article, i.e., hacking, viruses, trojans, etc.

Computer security software requirements:

Norton Internet Security (Firewall and Antivirus).
Adgone (Eliminates Ads and Popups).
Spybot (Presents Spyware from being installed).
Evidence Eliminator (cleans the hard drive of residual information)

[D-fendr]

I think your list is good, but lacks:
Secure configuration of operating system and internet applications.
Good password policy.
User awareness.