hmmm - not good.

[stj]

http://cyberwarzone.com/finfisher-du...rsky-included/

[Th3_uN1Qu3]

Re: hmmm - not good.

Not even Malwarebytes picked it up? That is indeed reason for worry.

[stj]

Re: hmmm - not good.

"wanted" to pick it up / reported finding it, you mean!!!

[cheapie]

Re: hmmm - not good.

Is this a Windows-only (or Windows/Mac only) thing?

[c_hegge]

Re: hmmm - not good.

Not even Malwarebytes picked it up? That is indeed reason for worry.

And what's really strange is that, of all Antivirus programs, McAfee picked it up

[stj]

Re: hmmm - not good.

McAfee probably didnt get the bribe.
that guy (John McAfee) has a history, he was prosecuted once to writing a virus to boost sales.

[stj]

Re: hmmm - not good.

Is this a Windows-only (or Windows/Mac only) thing?

the terrorists behind FinFisher have versions for every o.s. including mobile ones.

[diif]

Re: hmmm - not good.

As it's been out over 3 years and is expensive, i'd like to think it wasn't picked up by many antivirus solutions.
FinFisher is for Linux too.

[cheapie]

Re: hmmm - not good.

FinFisher is for Linux too.

Well, then.... let's hope that it doesn't become a big problem.

[stj]

Re: hmmm - not good.

it cant get far in linux or osx without being given root access.

it's much harder to takeover a nix box because the security works very differently than windoze.
the same does not apply to fonez where the fone company / google are the root admin and you are just the user.
that's why you should always install a custom rom and lay off the app-store crap.

got an "eye-fone" - your fucked in that regard!

[goontron]

Re: hmmm - not good.

it cant get far in linux or osx without being given root access.

it's much harder to takeover a nix box because the security works very differently than windoze.
the same does not apply to fonez where the fone company / google are the root admin and you are just the user.
that's why you should always install a custom rom and lay off the app-store crap.

got an "eye-fone" - your fucked in that regard!

+1 to get the equivalent of root on windows its just one API call away.... with anything *nix it's a call to sudo, su, xdg-su, etc. and the rest would exceed the character limit of the forum.

[ratdude747]

Re: hmmm - not good.

it cant get far in linux or osx without being given root access.

it's much harder to takeover a nix box because the security works very differently than windoze.
the same does not apply to fonez where the fone company / google are the root admin and you are just the user.
that's why you should always install a custom rom and lay off the app-store crap.

got an "eye-fone" - your fucked in that regard!

Two points:

1. what finfisher was made to do doesn't require root... as spying on a single user doesn't require or benifit from taking the system down. Ideally such would change as little as possible to avoid detection.

2. A lot of phones don't allow for custom roms like my POS Att galaxy S4. locked bootloader and it was made after the batch disabling loki came out. I didn't know at the time ATT locked all thier bootloaders... so I'm fucked for another year. Lucky to get root... and I couldn't even get safestrap to work (not that that compatible roms are any better, they still have touchwiz bullshit to pass the bootloader).

[goontron]

Re: hmmm - not good.

Two points:

1. what finfisher was made to do doesn't require root... as spying on a single user doesn't require or benifit from taking the system down. Ideally such would change as little as possible to avoid detection.

2. A lot of phones don't allow for custom roms like my POS Att galaxy S4. locked bootloader and it was made after the batch disabling loki came out. I didn't know at the time ATT locked all thier bootloaders... so I'm fucked for another year. Lucky to get root... and I couldn't even get safestrap to work (not that that compatible roms are any better, they still have touchwiz bullshit to pass the bootloader).

not sure what it would be spying on. all keyloggers (that i have found) crash X. clamAV is OSS, so yeah.....

[ratdude747]

Re: hmmm - not good.

Screenshots perhaps?

[stj]

Re: hmmm - not good.

a nix ap will need root access to get itself to reliably auto-start.
if it just attaches to a user proccess then it's dead after a reboot.
the only possible way around thatis to spoof itself as a screensaver - but i'm not even sure that would work because the screen savers are in the root path and the terror-ware could not insert or link itself to the path without being root.
it also cant hide - not that protesters,journalists etc know how to look for it anyway.

[goontron]

Re: hmmm - not good.

Screenshots perhaps?

I would, but....
No seriously, where can I get a replacement print screen keycap for an IBM model m keyboard?

[stj]

Re: hmmm - not good.

you could patent that and sell modded keyboards to the u.s. government.
call it the anti-snowdon keyboard layout!

[Spork Schivago]

Re: hmmm - not good.

a nix ap will need root access to get itself to reliably auto-start.
if it just attaches to a user proccess then it's dead after a reboot.
the only possible way around thatis to spoof itself as a screensaver - but i'm not even sure that would work because the screen savers are in the root path and the terror-ware could not insert or link itself to the path without being root.
it also cant hide - not that protesters,journalists etc know how to look for it anyway.

Not really arguing with you here but for KDE, I know you used to be able to put a shell script in /home/username/.kde/Autostart and it'd auto start when you logged into KDE. I don't know if that still works. I run Gnome now. /home/username/.kde/Autostart would be owned by the user, not root, I'd like to think.

[stj]

Re: hmmm - not good.

kde autostart wont work with kde4, i know because i tried to use it once for a christmas screen decoration.
it worked in kde3 though.

[Agent24]

Re: hmmm - not good.

Interesting but that VT scan has not been updated for a couple of months.. needs to be re-scanned to see what's up now... but they have to re-upload the file I think