[ACTU] [FUSION] Virus qui capture les images de webcam

New Worm Hijacks Webcams
August 23, 2004 (1:27 p.m. EST)
TechWeb News

A new worm can spy on users by hijacking their Web cameras, a security firm warned Monday.
The Rbot.gr worm -- the latest in a long line of similar worms; one security firm estimates that more than 4,000 variations have appeared -- has the capability of turning Webcams against their owners, said officials at U.K.-based Sophos.

“More and more hackers are interested in spying on the people they manage to infect,” said Graham Cluley, a senior technology consultant at Sophos in a statement. “In the workplace, this worm opens up the possibilities of industrial espionage. At home it's equivalent to a Peeping Tom who invades your privacy by peering through your curtains.”

Rbot.gr is a multi-threat worm, spreading through a number of Microsoft Windows vulnerabilities -- including those exploited by MSBlast and Sasser -- and through network shares. Once it lands on a Windows PC, it installs a backdoor Trojan horse that can then lead to the planting of password stealers, key loggers, and Webcam hijackers.

“If your computer is infected and you have a Webcam plugged in, then everything you do in front of the computer can be seen, and everything you say can be recorded,” said Cluley.

Cluley sees Rbot.gr and its ilk as evidence of a trend of malware spying on unprotected PCs, literally.

“With many home users keeping poorly-defended PCs in their bedroom, there is considerable potential for abuse,” he said.

Rbot.gr can be deflected with up-to-date anti-virus software and a firewall, said Cluley, but it users are still nervous, they should unplug Webcams when not using them for audio/video conferencing.