Trojans using Microsoft's DRM format
by Volker Weber
John Leyden writes:
Normally when a user tries to play a protected Windows media file, and a valid license is not stored on a computer, the application will look for it on the internet, so that the user buy access to copyright-protected content. This new technology is incorporated in the latest Windows Media Player 10 update as well as XP SP2.
If the user runs a video file that is infected by one of the "DRM Trojans", they pretend to download the corresponding license from the net. In reality users are redirected to sites that take advantage of Windows vulnerabilities to download spyware, adware, premium-rate diallers and other viruses onto victim's machines.
Boy, do we feel secure now that we are "protected" by DRMed files. The latest and greatest Microsoft Office has a similar mechanism. ET phone home.
