Haunting Thought: Is Your PC a Zombie?

From Mary Landesman,

In The Night of the Living Dead, zombies sucked brain matter in a frenzied hunger. In the computer world, a Trojan can be used to turn your PC into their own computing matter – effectively turning it into a zombie machine. Once under the control of such an illicit program, the Trojan can be accessed by hackers possessing the master, or server, version of the Trojan. The compromised machines can then be used for any number of things. Some are victimized by benign playfulness: CD-ROM drive bays opening and closing is one such common tactic. In other cases, however, the intent is much more ominous.

Trojans have the same right on the system as does the logged in user. In other words, if the user can, the Trojan can. This includes deleting or modifying files, installing other software, uninstalling software, or sending sensitive password and login information to a remote server.

Computers affected by Trojans can be used to launch attacks against targeted Internet sites.

By having thousands of computers accessing the same site at the same moment, the site servers can sometimes become overwhelmed and may no longer be able to process requests. These attacks, referred to as Distributed Denial of Service, or DDoS, attacks, are becoming increasingly common.

Creating a botnet

Just how do Trojans get on the system? Many are sent via email attachment, masquerading as a legitimate piece of software. When the user executes the attachment, the Trojan installs itself to their system. In most cases, there is no indication this has occurred, and the user innocently plays the game before sending it on to the next victim. While email attachments may be the most common, there are dozens of others ruses used.

Once installed, the system is referred to as a zombie as it is now under the control of the attacker. Often, the attacker will share the list of zombied systems with others, giving unfettered access to their collection of zombie machines by other ill-intended criminals. Wannabe attackers can also find them by simply scanning for compromised machines, now set up to send a greeting of readiness to listening ears. Collectively, the zombied systems are referred to as a botnet.

These botnets are then used for a variety of criminal purposes – all of which pose serious risk to the infected user as well as the entire Internet community. And while some may not care about the risk to the Internet as a whole, remember that many of today’s threats include keylogging capabilities. Of special interest to the attackers are any personal financial details – which are then used for everything from credit card theft to outright identity theft. In short, it’s not just your computer at risk – it’s your wallet.

While it may be tempting to think it cannot happen to you, think again. Malicious code has evolved far beyond the childish pranks of yesteryear. Today’s attackers are serious criminals, in it for the money, and they need as many systems under their control as they can get. If your computer isn’t properly protected, it’s not a matter of whether it’s part of a botnet inasmuch as it’s a matter of how long and how bad.

While broadband users are the favorite targets, even dial-up users can be unwitting participants. Various studies have demonstrated that any vulnerable system can be compromised within as little as 5 minutes online.

Protecting against Trojans

PREVENTION is the key. Don’t open unanticipated file attachments from unknown sources. If you know the source, double check with them and make sure they intended to send it. Ask them exactly what it is and why you need it.

If it is a game or frivilous application, delete it. Save any attachment you have a need to open and scan it with an up-to-date antivirus scanner before you launch it.

FIREWALL your system. Antivirus software is a must, but it is simply not enough. Whether you connect via dial-up, cable, satellite or DSL, and regardless of your ISP, get and use a personal firewall. If you don’t have one, several free firewalls, used properly, can offer excellent protection:

Kerio Personal Firewall
Sygate Personal Firewall
ZoneAlarm
COMPUTE SAFELY. Follow these Computer Safety Tips for additional advice on securing your home PC.