Botnet worm in DOS attacks could wipe data out on infected PCs

July 10, 2009

The denial of service attacks against Web sites in the U.S. and South Korea that started last weekend may have stopped for now, but code on the infected bots was set to wipe data on Friday, security experts said.

There were no immediate reports of any of the compromised PCs in the botnet having files deleted, but that doesn't mean it wasn't happening or won't in the future, said Gerry Egan, a product manager in Symantec's Security Technology Response group.

There are only about 50,000 infected PCs around the world being used in the attacks, which is relatively small compared to the millions that were infected with Conficker, he said.

The attacks started over the July 4 weekend launching distributed DOS attacks that led to outages at more than two dozen government and commercial sites in the U.S. and South Korea. The attacks, which resurged during the week at least twice, affected sites including the White House, the Federal Trade Commission, the Secret Service and The Washington Post.

One of the files dropped on infected PCs is programmed to wipe out files on the PC, including a master boot record, which will render the system inoperable when the PC is rebooted, Symantec said. "Basically, your system is in trouble if this executes," Egan said.

Botnet expert Joe Stewart of SecureWorks told The Washington Post that he tested the self-destruct Trojan and found it capable of erasing the hard drive on an infected system, but that that function wasn't being triggered. He speculated that either there is a bug in the code or that the feature is set to activate at a later date.

Researchers are finding that the botnets launching the attacks are infected with several types of malware. The MyDoom worm is being used to spread infections between computers via e-mail, Symantec and other anti-virus vendors have reported.

A dropper program called W32.Dozer that contains the other components is sent by W32.Mytob!gen to email addresses it gathers from the compromised computer, the Symantec Response Blog says. If a user executes the attachment, W32.Dozer drops Trojan.Dozer and W32.Mydoom.A@mm on the system.

The Dozer Trojan serves as a backdoor and connects to IPs through certain ports, allowing it to update itself and to receive instructions on sites to attack, according to Symantec. It's unclear if the DOS attacks will happen again because the infected PCs can receive new instructions at any time, Egan said.

"There is nothing new or novel in the technology," he said. Judging by the high-profile sites attacked it's likely the attackers are just trying to get attention, he added.

South Korea officials told reporters on Friday that the DOS attacks used 86 IP addresses in 16 countries, including South Korea, the U.S., Japan and Guatemala, but not North Korea, according to an Associated Press report.

This graphic shows how the different malware components on the denial of service botnets interact.

(Credit: Symantec)
 

Why Chrome OS? Google says, why not?

July 9, 2009

Google has long worked on expanding its reach beyond mere Internet search. And as many had suspected, it confirmed late Tuesday night that it plans to develop a lightweight operating system based on Linux and Web standards for personal computers.

Why? Well, Google's standard response to any question about why it's working on something other than search is to declare that any product that helps people get on the Web, and enjoy their experience on the Web, benefits Google's advertising customers in that more Web users equals more Google searches.

Yet, Chrome OS represents something more. There's a competitive impact that can't be ignored, no matter how often Google insists that it's in this world to do good rather than inflict pain on other corporations.

Few details were available Wednesday concerning one of the most important and ambitious projects Google has ever undertaken. Sources familiar with the Chrome OS project say Google engineers have only been working on the project in earnest since the beginning of the year, so there's likely a lot that still needs to be ironed out.

Chrome OS is the byproduct of Google thinking it can do better than Windows, Mac OS X, the various flavors of Linux, and even its own Android operating system. It's long been obvious that the world has changed from a personal computing model built for individuals working offline or businesspeople sharing files across a workplace to one where the consumer/business lines have blurred and people are expected to be online anywhere and everywhere.

Accompanying that shift has been the decreasing importance of processing power and operating system complexity. For years, the dirty secret of the computer industry has been that most people don't use nearly the amount of headroom provided to them by modern microprocessors and operating systems.

After all, if you're searching the Web, sending e-mail, typing up documents, touching up photos, and updating your Facebook status--hardly an uncommon usage model--you're more concerned with speed and battery life than raw power. Those still playing Doom or editing video will always need something more robust, but most people do spend an awful lot of time in the browser and have embraced smartphones and Netbooks as a way of staying online on the go.

Google's general idea seems to be twofold. First, it wants to make it easier for regular people to use a computer by making an operating system that is fast, secure, and lightweight enough to run on portable devices.

Sources familiar with Google's plans for the Chrome OS said that the company is working on a new method of "windowing," or switching between multiple applications. Google also believes that the whole idea of storing your files and applications in folders is an archaic way of organizing your data, and plans to unveil a new user interface that handles things a little differently.

Secondly, Google believes that through the use of Web standards like HTML 5--promoted heavily during its recent Google I/O conference as the development platform of the future--software development on a browser-based OS will be easily understood by developers reared in the Web 2.0 era.

This is not a new idea. Palm is betting its future on such a strategy, having introduced WebOS on the Palm Pre as a Web-friendly development environment based on a browser engine running atop Linux. Sound familiar?

Google brings much more to bear than Palm, however. It has an entire suite of Web applications and services that already form much of what you want a computer to do: send e-mail, compose documents, edit photos, and, of course, browse the Web.

But why does Google think it needs two operating systems to address this evolving usage model? Much of the language used to introduce Chrome OS could have been pulled from a blog post two years ago introducing Android, Google's lightweight Linux-based open-source smartphone operating system.

Just a few months ago Google's Andy Rubin declared Android to be "a revolution" that would help Google conquer the write-once, run-anywhere goal that has eluded the non-Microsoft software community for so many years. And Google executives have endorsed the concept of other companies building things other than phones based on Android.

However, Android appears to now occupy a different role in Google's thinking. According to Tuesday night's blog post, "Android was designed from the beginning to work across a variety of devices from phones to set-top boxes to netbooks. Google Chrome OS is being created for people who spend most of their time on the web, and is being designed to power computers ranging from small netbooks to full-size desktop systems."

As noted, there are an awful lot of details that still need to surface before we can glean Google's true intent with Chrome OS, not to mention the potential impact. Google said it plans to release the code for Chrome OS later this year, with the expectation that devices based on the OS could arrive in the second half of 2010.

But one thing is for sure: Google's ambitions are boundless. The company is proposing to do nothing less than rewrite the rules that govern personal computing.


 

Google plans Chrome-based Web operating system

July 8, 2009

That Google operating system rumor is coming true--and it's based on Google's browser, Chrome.

The company announced Google Chrome OS on its blog Tuesday night, saying lower-end PCs called Netbooks from unnamed manufacturers will include it in the second half of 2010. Linux will run under the covers of the open-source project, but the applications will run on the Web itself.

In other words, Google's cloud-computing ambitions just got a lot bigger.

"Google Chrome OS is being created for people who spend most of their time on the Web, and is being designed to power computers ranging from small Netbooks to full-size desktop systems," Sundar Pichai, vice president of product management, and Linus Upson, engineering director, said in the blog post.

The move has widespread implications.

One is that it shows just how serious Google is about making the Web into a foundation not just for static pages but for active applications, notably its own such as Google Docs and Gmail. Another: it opens new competition with Microsoft and, potentially, a new reason for antitrust regulators to pay close attention to Google's moves.

The move also gives new fuel to the Netbook movement for low-cost, network-enabled computers. Those machines today run Windows or Linux. Google Chrome OS provides a new option that hearkens back to the Network Computer era of the 1990s espoused by Sun Microsystems' Scott McNealy and Oracle's Larry Ellison.

Google is making sure its standard antitrust rebuttal, that "competition is one click away," remains intact with Chrome OS, though. "All Web-based applications...will run not only on Google Chrome OS, but on any standards-based browser on Windows, Mac, and Linux, thereby giving developers the largest user base of any platform."

Another bit of intrigue comes with the corporate politics. Google has argued that offering its Android mobile-phone operating system isn't a big enough competitive issue with Apple that Chief Executive Eric Schmidt must step down from Apple's board. Offering a full-on PC operating system could intensify the Federal Trade Commission's "discussions" about Schmidt's dual Apple and Google responsibilities .

Google has a track record of upsetting the status quo, though, taking on strong incumbent players and rattling cages well beyond the computing industry. Google Docs competes with Microsoft Office. Gmail competes with Yahoo Mail and Microsoft Hotmail. Google Books aims to digitize the publishing industry. The Android operating system is designed to make smartphones cheap and ordinary.

'Rethinking' the operating system
With Google Chrome OS, the company hopes to start afresh with personal computing.

"The operating systems that browsers run on were designed in an era where there was no Web," the blog post said. "So today, we're announcing a new project that's a natural extension of Google Chrome--the Google Chrome Operating System. It's our attempt to re-think what operating systems should be."

Among the benefits Google touted are "speed, simplicity and security," Pichai and Upson said. "We are going back to the basics and completely redesigning the underlying security architecture of the OS so that users don't have to deal with viruses, malware, and security updates."

Google is talking to Netbook partners now, and the project will become open-source "soon." It will run on members of the x86 and ARM processor families, Google said.

Google declined to comment on its plans beyond the blog posting.

The company also didn't mention how exactly it hopes to profit from Chrome OS, but it seems likely it's the latest variation on trying to get more people using the Web more often and more deeply--behavior that correlates with more searching and more search advertising.

"Any time our users have a better computing experience, Google benefits as well by having happier users who are more likely to spend time on the Internet," Upson and Pichai said.

Hints of Chrome OS
Hints of the direction have been abundant, but it wasn't clear Google would go as far as creating a product branded as a full-on operating system.

On the software side, one hint was Gears, a plug-in to give browsers the ability to run Web applications even when offline.

Next came Chrome itself in September 2008. Google said its ambition with the open-source browser was to make the Web a faster, richer foundation for Web applications. Naturally, Gears was built in from the outset, and Google continues to bang the Web-applications drum loudly.

Next came Native Client and O3D, plug-ins that let browsers tap directly into the power of local processors and, if all goes according to plan, match the performance of PC-based applications. Native Client is for the main computing chores, and O3D is for hardware-accelerated graphics, and Google wants to build Native Client at least directly into Chrome.

The other set of clues came from the Web side of the company's operations. Google's cash cow is selling ads alongside search results, but the company has been trying for years to build a portfolio of Web-based applications that people could use for everyday computing. Google Docs offers a Web-based word processor, presentation, and spreadsheet, and Google Apps bundles that along with Gmail and Google Calendar.

For others trying to make a run at Web-based applications, Google offers Google App Engine, a foundation for online Python and Java programs that can run at the scale of Google's own computing infrastructure, though free use is more limited.

One of the primary advantages of Google's cloud-computing approach is that data is available from anywhere you can find a networked computer--or, increasingly, mobile phone. It also permits more natural collaboration, since multiple authors can work on the same document simultaneously rather than e-mailing variations or sharing them on a central server. And with data stored on the Net rather than on a PC, upgrades and laptop theft are relatively painless issues.

The disadvantages are abundant, though. Web applications are slow and primitive compared to those that run on PCs, network access is far from ubiquitous, familiar applications are missing, years of accumulated files and data must be migrated to a new system, and not everybody is prepared to have precious corporate or personal information housed at Google or other companies.

The Net is a different place than when the Sun's JavaOS and network computers flopped in the marketplace, and Google is powerfully profitable. But many of the original challenges remain.

 



Best Communitation Website
Which communication website is best?

Myspace
Facebook
Twitter
Furry-paws
Youtube


Make a free website with Yola