“When it comes to disclosure,” said Ferguson, “most vendors will only give up data to law enforcement regarding their own customers on receipt of the required legal documentation to force them to do so, and that definitely includes Trend.” Corrons agrees, “no vendor will report it to authorities. If cloud-based anti-virus finds malware, and has the facility to report back to the vendor, the question then is whether the vendors have a duty to report that to the authorities. The main danger to the user, of course, is potential detection and subsequent prosecution by the authorities. If detected, it should be detected as a hacking tool, as in some environments the user may want the option to work with it – otherwise it could be considered a false positive.” Running a scan in VirusTotal, he adds, shows that 26 out of 42 scanners detect it, and most of them as a hacking tool. Therefore, it can be detected or not, depending on each vendor. “LOIC is not a malicious file per se,” he told Infosecurity, “it is a tool which can be used for malicious purposes. Luis Corrons, technical director at PandaLabs, takes a similar view. We detect it as a ‘hacker tool’.” Sophos has detected LOIC as a ‘potentially unwanted application’ since 2008. “But since it is manually installed, used voluntarily and very transparent about what it does, it is not strictly malware. “ Trend Micro started detecting it in 2010,” Rik Ferguson, director of security research told Infosecurity.
It is LOIC that is detected, not a separate infection within it. LOIC is open-source, which would make it effectively impossible to infect without someone noticing.
LOIC WINDOWS DOWNLAOD DOWNLOAD
Anti-virus products can detect it, leading some users to believe that the whole concept is a ploy by hackers to use the download to infect their computers. There is some controversy over the potential danger to the user in using LOIC. A single canon doesn’t have enough fire power to harm the target, but LOIC users effectively become a willing partner in a botnet that can be controlled and directed from an activist command server. It does little more than repeatedly send requests to the target web server. LOIC is a simple application that allows users to – illegally, it has to be said – take part in a distributed denial of service attack without needing to be a computer expert. Downloads in Germany, however, are decreasing. “The US, France and Brazil were the respective gold, silver and bronze medalists,” with France rapidly overhauling America. Writing in the Imperva Data Security Blog, Rob Rachwald notes that by 22 April, downloads in 2012 surpassed the total for 2011 – that’s “142 downloads per hour,” he notes.
0 kommentar(er)
