Another one bites the dust, this time for spying on a teenage girl via webcam. 4 years is a reasonable sentence this time I think as the case borders on many offenses such as blackmail, indecent behaviour, infringement of privacy, unlawful access and probably a few more.

It was a pretty simple hack as it goes, a trojan and then straight forward access to the webcam – this case is the reason most security minded people cover their webcam with something just in case.

A 47-year-old computer technician has been jailed for four years after he hacked into a teenage girl’s webcam to spy on her.

The unnamed hacker used a Trojan horse virus to access the webcam remotely, which was passed on to the girl’s computer through an infected email.

Once he hacked into the webcam, he took images of her and threatened her with blackmail unless the teenager ‘posed’ indecently for him.

If he’d done it just for kicks and not tried to blackmail the poor girl he probably would have gotten away with it. Why do people have to be so greedy?

Human nature.

The news of the hacker comes from Sophos, the analysis centre for virus, spyware and spam, where the company reports that the man was arrested back in 2005, but has only been brought to justice this week.

Speaking about the court ruling, Graham Cluley, senior technology consultant for Sophos, said: “Most spyware is designed to steal your identity, your passwords, your banking information – but it is just as easy to program a Trojan horse to take over your webcam.”

“This case highlights that as well as malware being used for financial gain, it can also be used by voyeurs. Everyone needs to treat computer security as paramount importance to ensure they do not fall victim to an internet blackmailer or peeping tom.”

Most of the oldskool trojans like Back Orifice and DeepThroat came with capabilities to capture frames from the webcam, open and close the CD drive, invert the monitor display, pop up chat windows and many other ‘fun’ features.

I doubt this guy programmed anything himself, most likely he just downloaded something, bound it to something tempting and e-mailed it to the girl.

Source: Tech Radar (Thanks Navin)

It seems like people that make malware are getting more specific nowadays, the are no longer writing random self-propagating worms or trojans just for the sake of knowledge or notoriety.

Far more common nowadays is malware for specific purposes to capture login or banking details for certain sites or organisations.

This time it’s a custom trojan targetting eBay users.

eBay users are being targeted by an advanced Trojan that attempts to redirect traffic so it can silently bid on a car from the auction site’s car section, Symantec is warning. It is the latest security headache for eBay, which has faced an onslaught of complaints from some users who say fraud on the site has increased to unacceptable levels over the past few months.

eBay officials are aware of the Trojan and are working with Symantec to prevent it from affecting buyers and sellers, a spokeswoman said.

It seems to be a combination of phishing and malware rolled into one to grab details from eBay users.

Trojan.Bayrob implements a proxy server so that traffic intended for eBay is instead sent to one of several sites controlled by the attacker. Traffic is redirected by changing settings corresponding to at least six eBay URLs in the victim’s hosts file. Once connected to rogue servers, Bayrob is programmed to download configuration data, including a variety of php scripts.

At least one of the scripts, Var.php, downloads variables such as tokenized versions of eBay pages designed to dupe a victim into thinking they are legitimate. One such page spoofs eBay’s “Ask a question” section, which allows prospective buyers to – wait for it – ask sellers questions.

As always do be on guard.

Source: The Register