Hi malware fighters,
Digital rights management (DRM) is not only a solution to protect files from piracy,
it is also offering to virus developers a new infection vector.
Security authors just recently detected a Trojan that spreads through DRM.
The infection takes place when a user downloads a film via a P2P-network.
While trying to open the DRM-protected file the Media Player tries to download the associating license.
then opens to a fake site, that then downloads an executable.
This file looks like a license, but actually is a Trojan horse file.
Film protection is delivered through Vidlock.com,
a firm that offers DRM, for people to secure their files as a free service.
This service now also has developers of malware going there.
When the Trojan is active on an OS, it starts to download additional malware,
that makes changes to DNS, and will put an autorun.inf file for every disk it finds.
“Using DRM to protect files because of ideological problems has been a controversial issue for quite some time, and now can be turned into a real problem as it is being used as a malware vector”,
according to Prevx’s Marco Giuliani.
For further info read: http://www.prevx.com/blog/105/DRM-protection-abused-by-TrojanDRMLive.html
polonus