Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Researcher: Sony BMG "rootkit" still widespread
Robert Lemos, SecurityFocus 2006-01-16

WASHINGTON D.C. -- Hundreds of thousands of networks across the globe, including many military and government networks, appear to still contain PCs with the controversial copy-protection software installed by music discs sold by media giant Sony BMG, a security researcher told attendees at the ShmooCon hacking conference this weekend.

Comments Mode:
Researcher: Sony BMG "rootkit" still widespread 2006-01-18
Anonymous (1 replies)
A few false assumptions there ? cannot assume spread only by piracy.

My wife has her own PC and only plays legit CDs on the machine (we do not do music downloads) ? she does not have a clue how to use BitTorrent, Kazaa etc.

When I did a routine anti-virus / Trojan check on her machine a while ago I discovered the Sony RootKit.

This is in the UK.

So, a few possibilities.

Maybe Sony lied about the distribution (and possibly the number of infected CDs).

Maybe the distribution information is limited ? the CDs may have started off in the US, but maybe they were sold on to other legitimate retailers.

A great many of our CD purchases have been made online ? there's no way to know where that supplier obtained their CDs ? the market is global after all. ? I would assume its quite possible a UK (or often Jersey) based retailer may have found the cheapest price on CDs sourced from the US ? after all the UK has a deserved reputation for rip off expensive CD prices so I am quite happy to allow the fact that they are cheaper to bulk wholesale import from the states than source from more locally based bulk wholesale resellers..

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11369/32978#32978
Don't they sell MP3 players too? 2006-06-17
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus