Beijing Olympics
A series of attacks have tried to take advantage of the upcoming Olympic games

Malware writers cash in on Olympics

Rootkit-laden video is latest to exploit Tibet protests

Written by Shaun Nichols in California

A video file laced with a malicious rootkit is the latest attempt by hackers to cash in on the Beijing Olympics.

The video appears to be a simple protest cartoon packaged in an executable file. But the 'Race for Tibet' movie also contains a piece of key-logging malware that installs itself as a driver.

Advertisement

The cartoon shows a Chinese gymnast performing in an event along with images from the recent riots and government crackdowns in Tibet. The user is then urged to join a 'race for Tibet' protest.

McAfee researcher Patrick Comiotto warned that the movie initially infects the user with a malicious driver. The file is installed in the '%windir%/system32/' driver folder under the name 'dopydwi.sys'.

The file then proceeds to create a .dll file that logs keystrokes which are later uploaded to a server in China.

The cartoon is the latest in a series of attacks that have tried to take advantage of the recent events in Tibet and the upcoming Olympic games in Beijing.

Malware-laden fake petitions and press releases were sent out to pro-Tibet groups in early March following initial rioting in the region.

By last week, the Trojan involved in those attacks was linked to a larger series of SQL website attacks.

Piggybacking on current events has become a common social-engineering tactic for malware distributors.

Events ranging from the Virginia Tech shootings to the execution of Saddam Hussein have been exploited by hackers to infect unwitting users.

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

21 Nov 2008

9.11 MBPodcast Special: Views from the Valley More...

Podcast

20 Nov 2008

9.43 MBComputing podcast: Europol's data sharing woes; credit card protection at Cotton Traders More...

Shaun Nichols and Iain Thomson

14 Nov 2008

7.73 MBPodcast Special: Views from the Valley More...

Poll

Data breaches

Data breaches

What is the best way to ensure firms take data breaches seriously?

Previous poll results

Spotlight

Google Chrome

Google may pre-install Chrome browser

Search giant investigating OEM deals   More...

phil muncaster

Video: vnunet.com weekly debrief

Phil Muncaster and BusinessGreen.com editor James Murray discuss the week's...  More...

Ofcom HQ

UK leading European technology charge

Ofcom report reveals convergence trend   More...

CA World 2008

vnunet.com analysis: CIOs outline IT spending priorities

IT chiefs advise looking for high-value projects rather than suspending...  More...

Primary Navigation