Project Snowblind Worm

Project Snowblind Worm


Sophos has posted an article on their blog about a game installer that also includes a worm.
The game is titled Project: Snowblind. It is a multi-player first-person shooter from Eidos. The worm that comes with the installer is vghhost.exe. It is a network worm and also an IRC backdoor Trojan.
It can perform screen captures and log information among other processes. The author of the of the article notes that users should download legitimate freeware games from reputable sites or from the game publisher’s website.
Source: Sophos

It just appalls me to see what people do to get information off of your system.

Great article!

Hi NosferatuX

Not being a gamer myself I'm probably safe from this one :) but it's always best to let everyone here know, If it stops one infection it's well worth the time taken to post the info.

It's quite sad to see the programming talent wasted in this type of malware

I couldn't agree with you more. Talent's are needlessly being wasted

Hi

Of course the main problem these days is, whereas malware of the past was often written for the sake of kudos amongst peer groups or as a proof of talent, these days there is a seed change in the reasons for creating malware - the obtaining of money illegally - and this means of course that a lot of money is available to employ the best people - for $1000 dollars you can purchase a targeted work/keylogger/trojan on the net- The times we live in I suppose

This is a 'Bot' that not only steals passwords but also possible... identity theft (online banking and credit card numbers)