View Full Version : New Trojan Swaps Porn for Koran
ABWAN
09-07-2005, 07:22 PM
Assalamu alaikum, Thought this was quite interesting lol
New Trojan Swaps Porn for Koran
Robert McMillan, IDG News Tue Sep 6, 5:00 PM ET
A new Trojan horse program circulating around the Internet this week appears to be on a moral mission to stamp out adult Web sites, according to security research firm Sophos.
Instead of snooping for sensitive financial information or secretly taking control of an infected computer, the Trojan horse, called Yusufali-A, monitors Web surfing habits. When it spots an objectionable term such as "sex" or "exhibition" in the browser's title bar, it hides the Web site and instead pops up a message taken from the Koran, says Gregg Mastoras, a senior security analyst with Sophos.
"Allah knows how ye move about and how ye dwell in your homes," reads part of the message, Mastoras says.
If the user does not quit the offending Web site, the Trojan horse eventually displays a message reading "Oh! NO i'm in the Cage" and forces the computer to log out.
Don't Open Attachment
Trojan horse programs are similar to viruses in that both contain malicious software that is installed on the user's computer. But Trojan horses, unlike viruses, do not try to spread to other computers once installed.
Other than chastising adult Web site surfers, Yusufali-A appears to cause no serious harm to infected systems, Mastoras says. Users must be running the Windows operating system and must click on an e-mail attachment to become infected with the program, he adds.
While Yusufali-A is unremarkable from a technical perspective, its moral tone sets it apart from other malicious software, Mastoras says. "It's remarkable to me because it's not really trying to steal any money or confidential information."
Sophos has not received many reports of users being affected by Yusufali-A, which is blocked by up-to-date antivirus software, Mastoras says. Users of infected PCs can remove the Trojan horse by following steps posted on the Sophos site.
Mastoras says he has no idea why the Trojan horse was written, or what the "i'm in the Cage" reference might mean. "One thing I never do is try to imagine what's in a virus writer's head," he says.
Reply
Login/Register to hide ads. Scroll down for more posts
Muezzin
09-07-2005, 07:30 PM
Well, that's certainly a novel approach to Dawah.
"One thing I never do is try to imagine what's in a virus writer's head," he says.
Ha! :D
I don't get the 'Cage' comment either though. I think a much better, more ironic statement would be simply:
'PAWNED'
:p :)
Reply
minaz
09-07-2005, 09:37 PM
lol that's quite good, however highly illegal - but it made me laugh :p
Reply
czgibson
09-07-2005, 10:03 PM
Greetings,
I read about this in the paper today - what an unusual trojan! It doesn't seem to be particularly harmful, it simply gets a message across.
Peace
Reply
Welcome, Guest!
Hey there! Looks like you're enjoying the discussion, but you're not signed up for an account.
When you create an account, you can participate in the discussions and share your thoughts. You also get notifications, here and via email, whenever new posts are made. And you can like posts and make new friends.
Sign Up
While Yusufali-A is unremarkable from a technical perspective, its moral tone sets it apart from other malicious software
When it spots an objectionable term such as "sex" or "exhibition" in the browser's title bar, it hides the Web site and instead pops up a message taken from the Koran,
Down with all the lame ass viri writers who are probably just script-kiddies.
Reply
I've got something called the Anti-Trojan Shield 2... is that the same thing as the trojan they're referring to in this article?
Reply
Salaam
Ahh well its not all that bad really.. i think there should be more around like this and hopefully it might just do some good for someone out there! :p
Reply
format_quote Originally Posted by zAk
wat u hv is an ANTI-Trojan, just like an ANTI VIRUS, i think
Ohhhhh lol...
"Unlike other malware, it appears this Trojan horse isn't trying to steal money or confidential information, but acting as a moral guardian instead"
The message displayed by the Trojan horse. :
The Yusufali-A Trojan horse forces users to logout of their PCs.
AWESOME!:thumbs_up
Reply
Muezzin
09-10-2005, 12:43 PM
format_quote Originally Posted by mary
Salaam
Ahh well its not all that bad really.. i think there should be more around like this and hopefully it might just do some good for someone out there! :p
They should have one for Terrorist websites.
The 'Oh no, I'm in THE CAGE' message might have more relevance in light of Guantanamo Bay. :p
Reply
minaz
09-11-2005, 01:26 PM
lol "cage" yeah down with the terror websites
Reply
mujahedeen2087
09-21-2005, 05:58 AM
good
that they are doing this
can it be stopped
anytime soon
MODERATOR's COMMENT : wat's up wid these multiple posts ? :thumbs_do
U r giving us a hard time, just to increase ur post count :-\
Reply
Munda Pakistani
10-07-2005, 08:25 PM
Now this is one Trojan I'd actually consider downloading. ;)
Reply
muslimrebel
10-08-2005, 04:07 PM
who ever is doing it may allah inshallah reward them.....man porn is like the worlds biggest business on the internet now......we need to get rid of it.....inshallah......wa salamu alaikum wa rahmatullah wa barakaat
Reply
pplzk
12-05-2005, 03:57 AM
http://www.theregister.co.uk/2005/09...soring_trojan/
If the malware sees one of a set of trigger words (such as "****", "****" or "*****") in the url it minimises the window so the user cannot see its content and displays a message from the Koran instead
does anyone know where to download the Yusufali-A/B trojan worm
* = CONTENT REMOVED :-\
Reply
Hey there! Looks like you're enjoying the discussion, but you're not signed up for an account.
When you create an account, you can participate in the discussions and share your thoughts. You also get notifications, here and via email, whenever new posts are made. And you can like posts and make new friends.
Sign Up
Similar Threads
-
Replies: 24
Last Post: 02-14-2015, 12:18 PM
-
Replies: 0
Last Post: 05-11-2014, 10:25 PM
-
Replies: 15
Last Post: 02-29-2012, 11:02 PM
-
Replies: 138
Last Post: 11-08-2010, 02:52 AM
Powered by vBulletin® Copyright © 2024 vBulletin Solutions, Inc. All rights reserved.