Beware of hidden malware in screensavers

[bk_7312]

I'm so glad I never bothered downloading any screensavers, the only screensaver I have ever used is a blank screen.

Malware has been found hidden inside an innocuous 'waterfall' screensaver .deb file made available on popular artwork sharing site Gnome-Look.org.image
The .deb file installs a script with elevated privileges designed to perform a DDoS attack as well as keep itself updated via downloads.

The dodgy screensaver in question has since been removed from gnome-look and this incident was a very basic, if potentially successful, attempt.

If anything this incident highlights the need to be careful what you download and where you download it from.

See here for more details: http://www.omgubuntu.co.uk/2009/12/m...or-ubuntu.html

[debtboy]

Installing packages is one of the few times a Linux system could be at risk, (due to the elevated privileges required), but this is not a case of a repository package containing a virus, but rather a virus maliciously hidden and uploaded to a third party software sharing site.

A certain amount of caution is always necessary when installing software from a third party website. One must understand that there is a level of risk involved, no matter what Operating System is used.


Here is a legal notice, from the website where the virus was downloaded from:

Liability for Content
We make every effort to keep the information on our Web site current, but accept no liability whatsoever for the content provided. Pursuant to §7 par. 1 of TMG (German Tele-Media Act), the law limits our responsibility as a service provider to our own content on these Web pages.
According to §§8 to 10 of TMG, we are not obligated to monitor third party information provided or stored on our Web site. However, we shall promptly remove any content upon becoming aware that it violates the law. Our liability in such an instance shall commence at the time we become aware of the respective violation. All contributors are responsible for the lawfulness of their uploads.
Please send us a notice if you spot an abuse of the website.

Liability for Links
Our site contains links to third-party Web sites. We have no influence whatsoever on the information on these Web sites and accept no guaranty for its correctness. The content of such third-party sites is the responsibility of the respective owners/providers. At the time third-party Web sites were linked to ours, we found NO GROUNDS WHATSOEVER of any likely contravention of the law. We shall promptly delete a link upon becoming aware that it violates the law.

Ironically, victims of this virus (packaged w/ a screensaver) probably have LCD monitors and therefore have no need of a screensaver.