Don’t say Sony wasn’t warned:

The DRM Rootkit (we first discussed it here, and it was widely analyzed here)  has now been exploited  by malicious virus writers:

Here’s what The Register had to say:

Virus writers have begun taking advantage of Sony-BMG’s use of rootkit technology in DRM software bundled with its music CDs.

Sony-BMG’s rootkit DRM technology masks files whose filenames start with "$sys$". A newly-discovered variant of of the Breplibot Trojan takes advantage of this to drop the file "$sys$drv.exe" in the Windows system directory.

"This means, that for systems infected by the Sony DRM rootkit technology, the dropped file is entirely invisible to the user. It will not be found in any process and file listing. Only rootkit scanners, such as the free utility RootkitRevealer, can unmask the culprit," warns Ivan Macalintal, a senior threat analyst at security firm Trend Micro

The malware arrives attached in an email, which pretends to come from a reputable business magazine, asking the businessman to verify his/her "picture" to be used for the December issue. If the malicious payload contained in this email is executed then the Trojan installs an IRC backdoor on affected Windows systems.

Romanian anti-virus firm BitDefender confirms that the malware is in the wild but a full technical analysis of the Trojan is yet to be completed. The response of anti-virus firms, some of which have only promised to flag up rather than block system changes made by Sony-BMG’s rootkit, remains unclear.

Let the class action Litigation begin!
(hey, might this be a violation of the DMCA?)

First Trojan using Sony DRM spotted
John Leyden
The Register, Thursday 10th November 2005 13:25 GMT

Category: Intellectual Property

Please use the comments to demonstrate your own ignorance, unfamiliarity with empirical data and lack of respect for scientific knowledge. Be sure to create straw men and argue against things I have neither said nor implied. If you could repeat previously discredited memes or steer the conversation into irrelevant, off topic discussions, it would be appreciated. Lastly, kindly forgo all civility in your discourse . . . you are, after all, anonymous.

3 Responses to “Sony Rootkit Morphs into MalWare (litigation to follow)”

  1. whatbird says:

    The Big Picture: Sony Rootkit Morphs into MalWare (litigation to follow)

    Link: The Big Picture: Sony Rootkit Morphs into MalWare (litigation to follow). When Sony developed the Beta technology, it was the best…hands down. They even licensed a few other companies to sell it as well. Then they cancelled/non-renewed those ag…

  2. Nick says:

    BitDefender detected the SONY without signatures.
    join the forum: