Spyware Hiding in Online Media Files   - 1,987 Views, 4 Comments

Summary: As if online downloaders don't have enough to worry about (rightly or wrongly), now they have to worry about spyware being buried within the media files they download. I don't think this is what Marshall McLuhan had in mind. According to a report in ...

Previous Article « Naked People Always Spread the Worst Viruses
Read Next Article » Cellery Diet Gives Windows Computers Worms

  Follow Anne on Twitter


As if online downloaders don’t have enough to worry about (rightly or wrongly), now they have to worry about spyware being buried within the media files they download.

I don’t think this is what Marshall McLuhan had in mind.

According to a report in InformationWeek, hackers are taking advantage of certain “features” of the Windows Digital Rights Management (DRM) scheme to load all sorts of spyware, adware, viruses and other nasty things onto an unsuspecting user’s computer.

When a user downloads a digital media file, the Windows DRM program looks for a license for the media on the user’s computer. If the license is not present, the program starts searching on the Internet for a license; once found the license is downloaded and presented to the user for purchase.

However, the trojaned media files don’t actually download the license, although they claim to be doing just that. Instead they go to a site or sites of the hacker’s choosing and download all the Internet nasties onto the user’s machine.

Yuck.

Sounds as if DRM will soon stand for “Download Risky Media”.

Spyware Hiding in Online Media Files

 Follow Anne on Twitter

 Twitter Explained in Plain English

 Friend Anne on Facebook

Previous Article « Naked People Always Spread the Worst Viruses
Read Next Article » Cellery Diet Gives Windows Computers Worms

Read more:

»  MPAA Contractor Infects Downloader’s Machines with Adware, Spyware

»  Microsoft Won’t..Oh, Wait…Will Fix DRM Flaw

»  State of Texas Sues Sony BMG Over Music CD Rootkits

»  MS Windows Anti-Spyware Disabled by Spyware Trojan

For additional similar stories check out our archives on Music Download, Pirates, Spyware & Adware

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

 

4 Comments »

  1. Spyware Hiding in Online Media Files
    As if online downloaders don’t have enough to worry about (rightly or wrongly), now they have to worry about spyware being buried within the media files they download. I don’t think this is what Marshall McLuhan had in mind. According…

    Trackback by Lockergnome's Net Patrol — 1/12/2005 @ 2:08 am

  2. hahahahahahahahahahahahahahahahahahahahahaha

    Comment by anonymoose — 1/12/2005 @ 12:23 pm

  3. How amusing! So if I’m not a music or movie thief, I still have to worry about going to some place like “Stupid Videos” and having my computer infected just because I watched a home movie of some person’s cat falling in a mud puddle. From the “JPEG of Death” to the “DRM of Insanity”. Enjoy!

    No longer apologize for Microsoft for they are lame.

    By the way, this exploit was discovered and implemented by a company hired by the RIAA to poison the P2P network. Yet another reason why “full disclosure” of exploits must not be suppressed. It’s not just the criminals we have to worry about, but corrupt corporations and governments as well. The exploits don’t go away just because the end user doesn’t know about them, they just get repurposed as adware, spyware and espionage vectors.

    If you can’t demand they be fixed then you suffer their existance and continued exploitation by these types.

    Comment by martinelli — 1/13/2005 @ 8:09 am

  4. Hi this is nagan

    Comment by Nagan — 11/1/2007 @ 5:53 pm

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
 This article first appeared on 1/12/2005
The Internet Patrol
Patrolling the Internet for You!