[CA is rating the viruses as a low to medium threat and most of its customers have not generally been widely affected by them, Curry says.] We have little to no escalations from customers that have been affected by it, ... We have no one saying, 'Oh my God I'm in trouble,' but we do have customers calling up and saying what do I need to know? |
If you choose to let people know what you're listening to, that's your business. If they do it without your permission, it's an invasion of privacy. |
It can damage the operating system and the operating system's integrity, so it can't reboot at all. As an expert in security, I can say this is bad behavior. |
It was a whole business model centered around selling this type of software to criminals. The malicious software was created and sold to criminal organizations so they can steal data. It's a lot different from the old days of the virus writer wars of who can gain the most notoriety. |
Steve [Gibson]'s concerns are valid, and we are going to address them. |
The reasons that this could be an indicator of things to come is if it were combined with other techniques as well and it were more aggressively pushed, then it could potentially be something that is used to improve the success of one of these attacks. I wouldn't be surprised if this started popping up as a standard way of doing things. |
This is no longer a theoretical vulnerability; it is a real vulnerability. This is no longer about digital rights management or content protection, this is about people having their PCs taken over. |
This is Old World crime, but it's using new tools. |
This vulnerability is rising in popularity among hackers, and it is simple to exploit. This has to be taken very seriously, and time is of the essence. A patch coming out as soon as possible is the responsible thing to do. |
We have a scorecard, and there are 22 points that we go through examining how the software behaves. In this case, XCP is falling down. |
We have little to no escalations from customers that have been affected by it. We have no one saying, 'Oh my God I'm in trouble,' but we do have customers calling up and saying what do I need to know? |
We have several samples of the Trojan, but we haven't seen a particularly unusual outbreak, and we haven't seen an unusual level of danger. |