Film-Tech Forum ARCHIVE: Hacker Plot Hijacks PC's For Sex Sites

This is topic Hacker Plot Hijacks PC's For Sex Sites in forum Film-Yak at Film-Tech Forum ARCHIVE.

To visit this topic, use this URL:
https://ft-forum.com/ft/cgi-bin/ubb/ultimatebb.cgi?ubb=get_topic;f=8;t=002250

Posted by Gerard S. Cohen (Member # 994) on 07-11-2003, 06:54 PM:

July 11, 2003
Hackers Hijack PC's for Sex Sites
By JOHN SCHWARTZ
From The New York Times

"More than a thousand unsuspecting Internet users around the world have recently had their computers hijacked by hackers, who computer security experts say are using them for pornographic Web sites.

The hijacked computers, which are chosen by the hackers apparently because they have high-speed connections to the Internet, are secretly loaded with software that makes them send explicit Web pages advertising pornographic sites and offer to sign visitors up as customers.

Unless the owner of the hijacked computer is technologically sophisticated, the activity is likely to go unnoticed. The program, which only briefly downloads the pornographic material to the usurped computer, is invisible to the computer's owner. It apparently does not harm the computer or disturb its operation.

The hackers operating the ring direct traffic to each hijacked computer in their network for a few minutes at a time, quickly rotating through a large number. Some are also used to send spam e-mail messages to boost traffic to the sites...."
http://www.nytimes.com/2003/07/11/technology/11HACK.html

This tech report, complete with schematic, details how an internet sleuth tracked more than 1,000 personal and business computers worldwide that were being used to funnel porno advertising, probably by a Russian ring.

So now we may understand better the problems Brad and the Film-tech monitors face in securing band-width from the depredations of such internet thieves.

The good news is that Mr.Smith, the investigator finds that
"The rogue program does not affect the Apple Macintosh...or computers running variants of the Unix operating system." And
you can prevent the intrusion by installing a firewall.

[ 07-12-2003, 02:14 PM: Message edited by: Gerard S. Cohen ]

Posted by Paul G. Thompson (Member # 655) on 07-11-2003, 09:10 PM:

I wanted to get DSL, but it is unavailable in this area. After reading the report, I would have "second thoughts" about getting it even if it was available.

We have DSL at work, and there has been nothing but problems with virus programs, port scans, and shit somehow getting into the computers that we have no idea where they came from.

I think those who plant secret programs in computers for hijacking purposes should be prosecuted to the full extent of the law.

But that probably won't happen. That thought is even more sickening.

Posted by Phil Hill (Member # 371) on 07-11-2003, 09:37 PM:

Paul: In the modern and real world areas that have DSL available, there are many programs to monitor and stop the sort of things that are a threat to the security of your computer.

I use PestPatrol to stop the annoying pop-ups, messenger crap ads, and to stop hidden scripts.

SpamCop for all those viagra, porno, mortgage, etc spam emails. And Norton anti-virus.

I hope the lawmakes have the BALLS to pass the anti-spam bills.

>>> Phil

Posted by Daryl C. W. O'Shea (Member # 1303) on 07-11-2003, 10:54 PM:

For some odd reason, I was actually watching CSPAN about a month ago (even more oddly, for many hours)... anyway, it appears that the so called lawmakers are still trying to define what spam is, so don't hold your breath for anything to be passed.

Besides, legistlation won't do much to stop the problem since it cannot apply to users (read assholes) outide the United States.

Paul, I would install the free version of ZoneAlarm (www.zonelabs.com) on your computers. It'll probably put an end to most of your (external) problems. Of course it won't stop your local users from loading crap on the computers. Yes, they are loading crap on them, even if they say they're not. [Smile]

Posted by Jason Burroughs (Member # 68) on 07-12-2003, 01:10 AM:

If you go the DSL route I HIGHLY recommend the Linksys BEFSX41 router, It does Stateful Packet Inspection (SPI), handles PPPoE instead if your desktop, can do site and content filtering (on a limited basis). You can set it to allow or deny Cookies, Java, and ActiveX individually. Heck, even set times that the connection to the internet is available (handy for eliminating after-hours surfing).

It can also support 2 VPN (IPSec) tunnels and 1 pass-though VPN (IPSec OR PPTP). Handy for doing a site, to site VPN.

Of course if you want a REAL Firewall you can't do any better than Cisco's PIX firewalls.

Posted by Daryl C. W. O'Shea (Member # 1303) on 07-12-2003, 01:44 AM:

Ditto what Jason said. I've done a lot of schools and small-medium sized businesses with the same Linksys boxes. They are inexpensive and hassle free, not to mention generally reliable as hell.

Of course the Cisco gear kicks butt too, but I only get to play with those once in a while... they ain't cheap folks.

Posted by Bobby Henderson (Member # 840) on 07-12-2003, 02:29 PM:

I have that Linksys model, but can only seem to get it to work for networking purposes between my two PCs. Southwestern Bell has been of no help at all telling me how I can configure it for PPPoE service instead of using the typical EnterNet 300 software.

At the very least, any user with a high speed connnection needs to have both a firewall running (either software or hardware) and updated anti-virus software. It also helps to have programs like Outlook Express set to not run Active X controls and other stuff that can launch from e-mails. The most simple thing is just opening the Options menu, going to the security tab and checking "do not allow Outlook Express to open any attachments that could be a virus." That one thing stops just about all of it right there.

In the interest of Internet users everywhere, I believe ISPs themselves need to do more on fighting malicious e-mails. Call it "improved customer service." Some do a good job with and others (like SW Bell / Yahoo) do absolutely nothing. One local ISP in my town not only filters out all viruses, but they actively check headers and trace the routes of malicious e-mails. They've actually succeeded in getting a number of hackers arrested and slapped with felony convictions. [thumbsup]

Posted by Don Bruechert (Member # 1538) on 07-13-2003, 11:08 AM:

I have internet from SBC/Ameritech, and it was relatively easy to set up my router. If you have a Dynamic IP (one that changes every time you log on) you can set the touter for PPPoE, put in your user name and password, and tell it to get its information from the host. It will get its own IP number and the two DNS gateway numbers and you are all set. Then you need to uninstall all of the enternet crap from your computer - it will interfere with what you just did. I would go a setp further and remove all of the network card and protocol information (except the dial up adapter) from "Networking" under control panel in Win98, or in the "Connections" area of win XP. Then reboot your computer and let it find the network card again. When it is done, go back into "Networking" and add the TCP/IP protocol if it is not already there. Then go into the properties of your TCP/IP entry and make sure it is configured to "obtain IP address automatically" - this should be the default. The only other thing is you MAY have to set your default gateway to 192.168.1.1 or whatever your linksys is set to.

Keep in mind this was a very rough overview. If you don't know that much about configuring windows you might want to have a friend help you out. I found when switching from having only one computer hooked to my DSL connection to a router that 90% of my problems were caused by Enternet or the "virtual" network connections it creates on your computer.

Hope this helps a bit... Flames > /dev/null

Posted by Steve Kraus (Member # 476) on 07-13-2003, 02:53 PM:

I use Tiny Personal Firewall, a free software solution.

First time it's used anytime something on your machine wants to talk to the outside world, or the outside world wants to contact your machine, a window will pop up asking if you wish to allow or disallow such a connection and whether or not your response should be taken as a permanent rule in the future. I was amazed at how many application programs were, unbeknownst to me, contacting their mother ship each time I was online and ran them. I nixed that right away.

I use the Proxomitron proxy as a pop-up & ad blocker although ATM I have Navigator going through it while IE does not.

As for prosecuting the hijackers, fine as long as what they did was covered by such hacking laws as exist. If not then they ought to pass one for the future but I do not believe in trying to stretch laws to cover some unanticipated situation. If it's not covered then it's not covered.

Posted by Paul G. Thompson (Member # 655) on 07-16-2003, 03:43 PM:

Please delete...I don't have the slightest idea how a double-post happened.

Posted by Paul G. Thompson (Member # 655) on 07-16-2003, 03:46 PM:

Daryl, I looked at the Zone Alarm software. Only problem is, most of our machines do not have enough CPU processing power to handle it. Minimum is 233mhz, and most of our stuff is well below that.

I am going to have to make some major improvements. The peer-to-peer network right to the DSL is not cuttin' the mustard. It is like a zoo.

[ 07-16-2003, 10:55 PM: Message edited by: Paul G. Thompson ]