Tuesday, November 22, 2005

3. SubSeven

This backdoor Trojan (sometimes called Sub7 or Backdoor-G) gained prominence in 1999. As with NetBus, SubSeven opens port 1243 and installs server software that lets a hacker with the installed client software control a victim’s computer.
SubSeven arrives in many forms. For example, users might believe the file is a movie clip. After Oklahoma City bomber Timothy McVeigh’s execution, some users received email messages claiming the SubSeven attachment was a video of McVeigh’s execution. SubSeven also has masqueraded as a network update and, ironically, as anti-virus software.


Post a Comment

<< Home