Film-Tech Cinema Systems
Film-Tech Forum ARCHIVE


  
my profile | my password | search | faq & rules | forum home
  next oldest topic   next newest topic
» Film-Tech Forum ARCHIVE   » Community   » Film-Yak   » Hacker Plot Hijacks PC's For Sex Sites

   
Author Topic: Hacker Plot Hijacks PC's For Sex Sites
Gerard S. Cohen
Jedi Master Film Handler

Posts: 975
From: Forest Hills, NY, USA
Registered: Sep 2001


 - posted 07-11-2003 06:54 PM      Profile for Gerard S. Cohen   Email Gerard S. Cohen   Send New Private Message       Edit/Delete Post 
July 11, 2003
Hackers Hijack PC's for Sex Sites
By JOHN SCHWARTZ
From The New York Times

"More than a thousand unsuspecting Internet users around the world have recently had their computers hijacked by hackers, who computer security experts say are using them for pornographic Web sites.

The hijacked computers, which are chosen by the hackers apparently because they have high-speed connections to the Internet, are secretly loaded with software that makes them send explicit Web pages advertising pornographic sites and offer to sign visitors up as customers.

Unless the owner of the hijacked computer is technologically sophisticated, the activity is likely to go unnoticed. The program, which only briefly downloads the pornographic material to the usurped computer, is invisible to the computer's owner. It apparently does not harm the computer or disturb its operation.

The hackers operating the ring direct traffic to each hijacked computer in their network for a few minutes at a time, quickly rotating through a large number. Some are also used to send spam e-mail messages to boost traffic to the sites...."
http://www.nytimes.com/2003/07/11/technology/11HACK.html

This tech report, complete with schematic, details how an internet sleuth tracked more than 1,000 personal and business computers worldwide that were being used to funnel porno advertising, probably by a Russian ring.

So now we may understand better the problems Brad and the Film-tech monitors face in securing band-width from the depredations of such internet thieves.

The good news is that Mr.Smith, the investigator finds that
"The rogue program does not affect the Apple Macintosh...or computers running variants of the Unix operating system." And
you can prevent the intrusion by installing a firewall.

[ 07-12-2003, 02:14 PM: Message edited by: Gerard S. Cohen ]

 |  IP: Logged

Paul G. Thompson
The Weenie Man

Posts: 4718
From: Mount Vernon WA USA
Registered: Nov 2000


 - posted 07-11-2003 09:10 PM      Profile for Paul G. Thompson   Email Paul G. Thompson   Send New Private Message       Edit/Delete Post 
I wanted to get DSL, but it is unavailable in this area. After reading the report, I would have "second thoughts" about getting it even if it was available.

We have DSL at work, and there has been nothing but problems with virus programs, port scans, and shit somehow getting into the computers that we have no idea where they came from.

I think those who plant secret programs in computers for hijacking purposes should be prosecuted to the full extent of the law.

But that probably won't happen. That thought is even more sickening.

 |  IP: Logged

Phil Hill
I love my cootie bug

Posts: 7595
From: Hollywood, CA USA
Registered: Mar 2000


 - posted 07-11-2003 09:37 PM      Profile for Phil Hill   Email Phil Hill       Edit/Delete Post 
Paul: In the modern and real world areas that have DSL available, there are many programs to monitor and stop the sort of things that are a threat to the security of your computer.

I use PestPatrol to stop the annoying pop-ups, messenger crap ads, and to stop hidden scripts.

SpamCop for all those viagra, porno, mortgage, etc spam emails. And Norton anti-virus.

I hope the lawmakes have the BALLS to pass the anti-spam bills.

>>> Phil

 |  IP: Logged

Daryl C. W. O'Shea
Film God

Posts: 3977
From: Midland Ontario Canada (where Panavision & IMAX lenses come from)
Registered: Jun 2002


 - posted 07-11-2003 10:54 PM      Profile for Daryl C. W. O'Shea   Author's Homepage   Email Daryl C. W. O'Shea   Send New Private Message       Edit/Delete Post 
For some odd reason, I was actually watching CSPAN about a month ago (even more oddly, for many hours)... anyway, it appears that the so called lawmakers are still trying to define what spam is, so don't hold your breath for anything to be passed.

Besides, legistlation won't do much to stop the problem since it cannot apply to users (read assholes) outide the United States.

Paul, I would install the free version of ZoneAlarm (www.zonelabs.com) on your computers. It'll probably put an end to most of your (external) problems. Of course it won't stop your local users from loading crap on the computers. Yes, they are loading crap on them, even if they say they're not. [Smile]

 |  IP: Logged

Jason Burroughs
Jedi Master Film Handler

Posts: 654
From: Allen, TX
Registered: Jun 99


 - posted 07-12-2003 01:10 AM      Profile for Jason Burroughs   Email Jason Burroughs   Send New Private Message       Edit/Delete Post 
If you go the DSL route I HIGHLY recommend the Linksys BEFSX41 router, It does Stateful Packet Inspection (SPI), handles PPPoE instead if your desktop, can do site and content filtering (on a limited basis). You can set it to allow or deny Cookies, Java, and ActiveX individually. Heck, even set times that the connection to the internet is available (handy for eliminating after-hours surfing).

It can also support 2 VPN (IPSec) tunnels and 1 pass-though VPN (IPSec OR PPTP). Handy for doing a site, to site VPN.

Of course if you want a REAL Firewall you can't do any better than Cisco's PIX firewalls.

 |  IP: Logged

Daryl C. W. O'Shea
Film God

Posts: 3977
From: Midland Ontario Canada (where Panavision & IMAX lenses come from)
Registered: Jun 2002


 - posted 07-12-2003 01:44 AM      Profile for Daryl C. W. O'Shea   Author's Homepage   Email Daryl C. W. O'Shea   Send New Private Message       Edit/Delete Post 
Ditto what Jason said. I've done a lot of schools and small-medium sized businesses with the same Linksys boxes. They are inexpensive and hassle free, not to mention generally reliable as hell.

Of course the Cisco gear kicks butt too, but I only get to play with those once in a while... they ain't cheap folks.

 |  IP: Logged

Bobby Henderson
"Ask me about Trajan."

Posts: 10973
From: Lawton, OK, USA
Registered: Apr 2001


 - posted 07-12-2003 02:29 PM      Profile for Bobby Henderson   Email Bobby Henderson   Send New Private Message       Edit/Delete Post 
I have that Linksys model, but can only seem to get it to work for networking purposes between my two PCs. Southwestern Bell has been of no help at all telling me how I can configure it for PPPoE service instead of using the typical EnterNet 300 software.

At the very least, any user with a high speed connnection needs to have both a firewall running (either software or hardware) and updated anti-virus software. It also helps to have programs like Outlook Express set to not run Active X controls and other stuff that can launch from e-mails. The most simple thing is just opening the Options menu, going to the security tab and checking "do not allow Outlook Express to open any attachments that could be a virus." That one thing stops just about all of it right there.

In the interest of Internet users everywhere, I believe ISPs themselves need to do more on fighting malicious e-mails. Call it "improved customer service." Some do a good job with and others (like SW Bell / Yahoo) do absolutely nothing. One local ISP in my town not only filters out all viruses, but they actively check headers and trace the routes of malicious e-mails. They've actually succeeded in getting a number of hackers arrested and slapped with felony convictions. [thumbsup]

 |  IP: Logged

Don Bruechert
Mmmmmmmmm, bird!

Posts: 340
From: Manitowoc, WI, USA
Registered: Jan 2003


 - posted 07-13-2003 11:08 AM      Profile for Don Bruechert   Author's Homepage   Email Don Bruechert   Send New Private Message       Edit/Delete Post 
I have internet from SBC/Ameritech, and it was relatively easy to set up my router. If you have a Dynamic IP (one that changes every time you log on) you can set the touter for PPPoE, put in your user name and password, and tell it to get its information from the host. It will get its own IP number and the two DNS gateway numbers and you are all set. Then you need to uninstall all of the enternet crap from your computer - it will interfere with what you just did. I would go a setp further and remove all of the network card and protocol information (except the dial up adapter) from "Networking" under control panel in Win98, or in the "Connections" area of win XP. Then reboot your computer and let it find the network card again. When it is done, go back into "Networking" and add the TCP/IP protocol if it is not already there. Then go into the properties of your TCP/IP entry and make sure it is configured to "obtain IP address automatically" - this should be the default. The only other thing is you MAY have to set your default gateway to 192.168.1.1 or whatever your linksys is set to.

Keep in mind this was a very rough overview. If you don't know that much about configuring windows you might want to have a friend help you out. I found when switching from having only one computer hooked to my DSL connection to a router that 90% of my problems were caused by Enternet or the "virtual" network connections it creates on your computer.

Hope this helps a bit... Flames > /dev/null

 |  IP: Logged

Steve Kraus
Film God

Posts: 4094
From: Chicago, IL, USA
Registered: May 2000


 - posted 07-13-2003 02:53 PM      Profile for Steve Kraus     Send New Private Message       Edit/Delete Post 
I use Tiny Personal Firewall, a free software solution.

First time it's used anytime something on your machine wants to talk to the outside world, or the outside world wants to contact your machine, a window will pop up asking if you wish to allow or disallow such a connection and whether or not your response should be taken as a permanent rule in the future. I was amazed at how many application programs were, unbeknownst to me, contacting their mother ship each time I was online and ran them. I nixed that right away.

I use the Proxomitron proxy as a pop-up & ad blocker although ATM I have Navigator going through it while IE does not.

As for prosecuting the hijackers, fine as long as what they did was covered by such hacking laws as exist. If not then they ought to pass one for the future but I do not believe in trying to stretch laws to cover some unanticipated situation. If it's not covered then it's not covered.

 |  IP: Logged

Paul G. Thompson
The Weenie Man

Posts: 4718
From: Mount Vernon WA USA
Registered: Nov 2000


 - posted 07-16-2003 03:43 PM      Profile for Paul G. Thompson   Email Paul G. Thompson   Send New Private Message       Edit/Delete Post 
Please delete...I don't have the slightest idea how a double-post happened.

 |  IP: Logged

Paul G. Thompson
The Weenie Man

Posts: 4718
From: Mount Vernon WA USA
Registered: Nov 2000


 - posted 07-16-2003 03:46 PM      Profile for Paul G. Thompson   Email Paul G. Thompson   Send New Private Message       Edit/Delete Post 
Daryl, I looked at the Zone Alarm software. Only problem is, most of our machines do not have enough CPU processing power to handle it. Minimum is 233mhz, and most of our stuff is well below that.

I am going to have to make some major improvements. The peer-to-peer network right to the DSL is not cuttin' the mustard. It is like a zoo.

[ 07-16-2003, 10:55 PM: Message edited by: Paul G. Thompson ]

 |  IP: Logged



All times are Central (GMT -6:00)  
   Close Topic    Move Topic    Delete Topic    next oldest topic   next newest topic
 - Printer-friendly view of this topic
Hop To:



Powered by Infopop Corporation
UBB.classicTM 6.3.1.2

The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion and agrees to release the authors from any and all liability.

© 1999-2020 Film-Tech Cinema Systems, LLC. All rights reserved.