Neoseeker : News : New virus injects itself into source code

New virus injects itself into source code
Kevin Spiess - Wednesday, August 19th, 2009 | 10:40AM (PT) 0 Favourites (0)


Would be impressive if it wasn't such a bummer

New virus injects itself into source code  Image 1

A novel new virus has been uncovered by security researchers at Sophos.

Identified as "W32/Induct-A", this virus has a new bag of tricks previously unseen in the ever-changing world of malware. W/32Induct-A has the ability to recognize any raw computer code (written in the programming language Delphi) on a computer, and copy itself into the code, to be complied into the finished executable file unseen.

Delphi is most often used for database programs. So, for example, if an accounting application programmer who works with Delphi became infected with this virus and didn't know it, all of his new accounting programs he or she would finish on the infected computer would then carry the virus, and would be sent out with all new programs they made -- possibly to thousands of clients or customers. Furthermore, due to the nature of the virus and how many software development teams work, W/32Induct-A would have a strong chance of being swapped around by the programmers.

The virus has been detected about 3000 times now, by Sophos.

In an interesting twist on this already interesting virus, Sophos has found cases were W/32Induct-A has infected banking Trojan horses -- often which are written in Delphi. W/32Induct-A would not help the banking Trojans out, so it is thought that the writers of the Trojans were infected by W/32Induct-A without knowing it. 

Source: Dark Reading

Section: Technology

  • 0 thumbs!
    MrGrimm since Mar 2008 | Aug 19, 09
    These viruses are getting very complicated, almost too much for MrGrimm's poor little brain to handle.
  • 0 thumbs!
    Vermillion since Jan 2006 | Aug 19, 09
    Interesting. I never expected a virus like that to be made in these days.
  • 0 thumbs!
    Bill Gates03 since Dec 2004 | Aug 19, 09
    LOL

    The virus infects the trojan.

    I never thought I would see this...
  • 4 thumbs!
    ViperSean since Apr 2002 | Aug 20, 09
    YO DAWG, WE HEARD YOU LIKE MALWARE SO WE PUT A VIRUS IN YO TROJAN SO YOU CAN GET INFECTED WHILE YOU GET INFECTED.
  • 2 thumbs!
    kspiess since Jun 2007 | Aug 20, 09
    Haha nice dude

    Last edited by kspiess :: Aug 20, 09
  • 0 thumbs!
    Rabla since Jul 2008 | Aug 20, 09
    ^ Win.
    This Virus is interesting though.
  • 0 thumbs!
    tallteen86 since Feb 2003 | Aug 20, 09
    Lol, now that's a funny Xzbit caption XD Both of you get a big thumbs up from me XD

    What does it actually DO though. Sure, it infects a source code, which is original, but what problems does it cause?
  • 0 thumbs!
    kspiess since Jun 2007 | Aug 20, 09
    Actually it doesn't have a payload right now, apparently. It just spreads itself, and [I assume] calls home, letting the virus-makers know where it has been.
    Last edited by kspiess :: Aug 20, 09
- This news story is archived and is closed to new comments now -

Hardware Newsletter:
Email:



Compare Prices

Motherboards
Abit
ASUS
Gigabyte
MSI
eVGA
Intel
Tyan
More...

Processors
AMD
Intel
More...

Memory
DDR
DDR2
DDR3
More...

Video Cards
ATI
eVGA
XFX
BFG
Sapphire
More...

search for lowest prices
(0.1311/d/nova)