Hackers Hijack Windows Media Player

[waldwolf]

Hackers Hijack Windows Media Player

January 13, 2005

Hackers are using the digital rights management feature in Microsoft's Windows Media Player to fool people into downloading spyware and viruses, a security company claimed on Wednesday.

According to a warning posted on security company Panda Software's Web site, virus writers have released licence-protected multimedia files containing Trojan horses that overcome the anti-piracy features in version 10 of the Media Player and Windows XP SP2.

Normally, when a user tries to play a licence-protected file but doesn't own the necessary licence, Media Player goes onto the Internet to find a site where they can buy one.

This Trojan, dubbed WmvDown.A, subverts this process by sending the player to a malicious Web site (serve.alcena.com) from which it downloads malware.

According to Panda Software, the Trojan is easy to spot once it has run. After connecting to the Internet, it displays the message: "Thanks for downloading this file. Click Play to listen."

A Microsoft spokesperson was not immediately able to comment on Panda's claims.

[RDN]

Thanks waldwolf. No more downloading of licenses until this hole's been patched.

Thanks for reading this post. Click "Play" to listen...

I wonder how many people just clicked the "play" button?

Edited January 14, 2005 by RDN