Rootkit unearthed in network security softwareNovember 29, 2008 – 2:32 PM
Researchers have unearthed rootkit-like functionality in an enterprise security product.
Network security software from a Chinese developer includes processes deliberately hidden from a user and, even worse, a hidden directory, Trend Micro reports. Files in the hidden directory could exist below the radar of antivirus scanners, potentially creating a stealthy hiding place for computer viruses that their creators might seek to exploit.
Trend Micro has written to the software developers involved in what looks like a case of misguided software design, rather than anything worse. Pending a fix from software developers, Trend Micro has slapped a “hacking tool” warning on the rootkit-like component of the network security tool (called HKTL-BRUDEVIC).
It doesn’t name the developers except to say they are the same firm which bundles rootkit-like software with USB storage devices featuring fingerprint authentication.