Intellectual Property Law

Beware Chatters: Net-Crooks Have Your Number

By IBLS Editor

Next time you are relaxing with a cup of java and Internet messaging a friend, beware that cyber-crooks could be using your spontaneous recreation as an opportunity to breach your security and launch an attack, according to a new study. Instant message users reported many attack incidents, with the assaults broken down as: 19% on the AOL Instant Messenger network, 45% on MSN Messenger and 20% on Yahoo Instant Messenger, with the rest occurring on all other IM networks. Even private networks are not safe, as these attacks have doubles since 2003. The Internet phone network Skype is also vulnerable. The study of the safety of so-called "Greynets" was conducted by analysts at FaceTime.com.

According to FaceTime, "Greynets" are defined as: "network enabled applications that are installed on an end user's system without permission from IT and are frequently evasive at the network level, using techniques like port agility and encryption to avoid being detected and blocked. Greynets sport a number of network and information security risks including potential vectors for malware, client-side code vulnerabilities, intellectual property loss, identity theft and more." For instant messaging options, more than 600 such greynets currently exist worldwide, which FaceTime expects believes will expand to more than 1,000 over 2008.

The danger in greynets is that their casual nature obscures the very real potential for opening the user's computer to malware, viruses and hacker access. The very design of IM's leads to users not being vigilant while employing them, as the devices give the chatters the understandable sense that they are having a spontaneous, and therefore safe interaction. But users should remember that the thieves exploiting these interfaces have often spent years learning how to breach even brief opportunities of access, especially as other security measures have been tightened. A user should see an IM interface as being analogous to opening the window of a castle to talk with someone friendly while a battle is raging. Even if the rest of the fortification is secured, there is no way to know what else can come in besides conversation while the window is open. And hackers hope they can shoot a fiery arrow inside an otherwise secured computer with a lucky shot, which will happen in a certain percentage of opportunities.

A real issue for businesses is the developing phenomenon of work-time Internet socializing. Analysts point to the fact that the new generation of office laborers entering the workforce seem to have a difficult time separating work-time from socializing and free-time pursuits. This leads them to visit social networking sites, such as MySpace and Facebook on work PCs, resulting in needlessly risky surfing that can end up in information loss, malware threats and security compliance breaches.

An example of a social networking hack occurred in November 2007, when the "Bandjammer" Trojan was released into MySpace profiles for musical acts. The thieves hacked into these music pages, leaving an invisible background image that linked back to a Trojan loaded site. Visitors who simply passed their mouse over the image had their browsers hijacked, while the Trojan installed a fake toolbars ironically warning of possible spyware infection, and which then offered a free scan that when clicked upon automatically drove the user to various porn sites. IBLS reported upon this MySpace music page Trojan phenomenon, in the story:Popstar's Website Hacked to Spread Virus to Fans, Showing ID Phishers Focusing on Social Networking Sites.

Chris Boyd, FaceTime's director of malware research, says "Many hacks and scams are creeping into the mainstream areas of MySpace and other social networking sites as the perpetrators become bolder and more aggressive. The most horrendous content imaginable is now easily stumbled on via simple redirects and blog hijacks. The myth that you have to 'go looking for it' has never seemed further from the truth." Also, in addition to thieves, there are an increasing number of "glory hackers" who launch attacks for fun or to impress others.

Boyd also remarked upon the strange phenomenon of hackers and other net attackers who simply don't seem to care whether anyone finds out what their real life identity. Also, cyber-crooks are also starting a life of sophisticated online crime at startlingly young ages. Says Boyd, "Children as young as 12 are sharing professional phishing kits and trading stolen credit card details."

Overall, readers should take note at the potential of extreme danger of internet messenger use. They are opened outside of system or computer firewalls and security measures, which most users do not realize. Therefore, the entire time a user is engaged in an Internet chat, their computer system and network is vulnerable to attack. For this reason, users should be very careful IM'ing at home and should absolutely have a 24/7 virus and malware sniffer/hunter operating. And for the safety of the entire business, IM's should not be used at work, period -- unless it is part of official work communications.

Full post as published by IBLS Internet Law Blog on January 21, 2008 (boomark / email).