Peeping Tom hacker jailed

This week, computer users are reminded about the importance of properly securing PCs, following news that a man has been jailed for preying upon young women via Internet Web cams.

The man, who has not been named but is a computer technician in Nicosia, spied on the then 17-year-old girl through her Web cam after infecting her PC with a spyware Trojan horse that he sent to her as an e-mail attachment.

"Most spyware is designed to steal your identity, your passwords, your banking information - but it is just as easy to program a Trojan horse to take over your Web cam," says Brett Myroff, CEO of regional Sophos distributor, Sophos South Africa.

"This case highlights that as well as malware being used for financial gain, it can also be used by voyeurs. Everyone needs to treat computer security as paramount importance to ensure they do not fall victim to an Internet blackmailer or peeping Tom."

Sophos notes that there have been other cases in the past where hackers have taken remote control of innocent users` Web cams in order to spy upon them.

Sophos experts note that the problem of poorly-defended PCs does not only affect young home users, but workers too.

"These attacks are not just a problem for youngsters. Home and remote workers use computers often equipped with Web cams and may have lax protection in place. The danger of people using a 'work` computer for non-approved use, such as instant messaging chat, is well documented. Companies should deploy application control technology to set a strict policy as to which programs, such as chat clients, can be used by their employees," Myroff says.

This week`s line-up of low to medium prevalence Trojans for the Windows operating system include Troj/Bckdr-QOS, Troj/Dloadr-BPK, Troj/FakeAle-EP, and Troj/FakeAle-EQ, says Myroff.

"Troj/BdoorB-Fam has also been noted and is a family of Trojans for the Windows platform," he says. "When first run, Troj/BdoorB-Fam may copy itself to <Windows>eos.exe."

Troj/Banker-EMW, another Trojan for Windows, may monitor a user`s Internet access, explains Myroff. "When certain Internet banking sites are visited, the Trojan may display a fake login screen in order to trick the user into inputting their details."