The Register » Security » Network Security »
Meet the Peeping Tom worm
By John Leyden
Published Monday 23rd August 2004 14:56 GMT
A worm capable of using webcams to spy on users is circulating across the Net.

Rbot-GR, the latest variant in the prolific worm series, spreads via network shares, exploiting a number of Microsoft security vulnerabilities to drop a backdoor Trojan horse program on vulnerable machines as it spreads. Once a backdoor program is installed on a victim's PC it's always game over - an attacker can do whatever takes their fancy. But Rbot-GR comes pre-loaded with functionality specifically designed to control webcam and microphones. Other variants of the worm do not come with this "Peeping Tom" routine, according to AV firm Sophos.

"If your computer is infected and you have a webcam plugged in, then everything you do in front of the computer can be seen, and everything you say can be recorded," said Graham Cluley, senior technology consultant for Sophos. "It would be like having a regular Web cam conversation except you wouldn't know you're taking part in it."

Aside from its voyeuristic behaviour, the Trojan component of the worm attempts to steal registration information for games and PayPal passwords from infected machines. It's a thoroughly nasty piece of code; so it comes as some relief that Rbot-GR isn't particularly widespread. Sophos has received only a handful of reports about the worm. Most vendors rate it as a medium-risk threat. As usual, Rbot-GR is a Windows-only menace. ®

lol, thats crazy, i need to do things more often on camera, might make them stop

oh man, thats creepy, I have my webcam pointed right at me, that means they could be looking at me typing right at this very moment.......

Even if ur not using ur webcam like i mean ur not using it in msn and messenger and stuff!! thats crazy.... im going to run antivirus just in case

i never trust the internet and viruses so unless im using it, my webcam is always pointed at the wall away from from face....they virus mite like walls or it cud be an easy way to wipe it out...

(must stop smoking that sh*t)

lol im so paranoid i always have my webcam facing up unless i need to use it

eek where do you get a patch? (if made) and oh god, do you think this could have anything to do with this program on my puter when i click it and it starts recording or takes pictures, and it saves it in my documents called "spying" ? ahhh

LoL i have the cover over the front of my webcam unless im using it just in case haha, would it show the connected status light?

i just unplugged

It should do and it doesn't really bother me what harm is it causing me? I ain't bothered about some person watching me thats possibly why i have a webcam feed on my website ( www.niles-lair.tk )
and stuff. Who cares other than strip-tease girls and boys.

Anyway they'd probably just see boring old me fiddling with a blob of blue tack if they did watch me

woah scary luck i dun have a webcam  luckily i will runan anti virus anyway

This may be a new virus, but it's still an old risk...just with a new edge. Trojans have been able to monitor all input devices for a while now...
The only slightly advanced part is the delievery method, this seems intregeing, I've been meaning to do some research into this kind of deployment for a while now...So it's actually a firewall that you need to block this kind of attack. And now you can get a free, not so bad, M$ firewall, I'd advise people start to use it...

quote:

---

Originally posted by DangerXone
im going to run antivirus just in case

---

lol i actually think i have got that virus my webcam app isn't loading its not in use on msn messenger. But the green light is on.

Well I scanned my computer, just to be safe.  I didn't have this virus, but I did have a little script virus on my computer, I'm glad I found that. 

You know when you open an app that shows what's on the cam, would it say the camera is being used by something else i had the virus?

quote:

---

Originally posted by jren207
would it say the camera is being used by something else i had the virus?

---

Bah, you can do that same thing with a Sub7 or Netbus. It's not new. Any who, what I would do if I had a web cam, I would tape this emoticon infrot of it when your not useing it. So when and if they do get control of your cam they get a nice surprise. lol.

that'll teach em lol

quote:

---

Originally posted by -dt-
lol im so paranoid i always have my webcam facing up unless i need to use it

---

You guys realise how unlikely you are to be watched, right?  Firstly the obstacles a virus would have to get over would probably cut-down webcam compatibility to the most common brands - then if you had any form of antivirus, firewall or home network would bring it to a halt - and if your webcam was activated you'd most likely notice, for a number of reasons.  After all that, what are the chances some hacker will actually be watching you?

quote:

---

Originally posted by Fukafly
Anyway they'd probably just see boring old me fiddling

---

a few weeks ago my webcam light wouldnt go off as if it was in use but it wasnt, oh well i have a cover and im not interesting i just play with cds and stuff on my desk and type away...

i found out that it was just explorer being gay again, not closing programs fuly so having to go into task manager stupid explorer.exe

I agree with fluffy_lobster. A virus would first have to find a webcam conected to your computer. Then either find its drivers to control it or find a whole in either the cams program or Windows. And its not like it will run ever cam on the market. Useally the chepper ones for like $30 are more of a risk than the $50 - $100 ones.

quote:

---

Originally posted by DJeX
I agree with fluffy_lobster. A virus would first have to find a webcam conected to your computer. Then either find its drivers to control it or find a whole in either the cams program or Windows. And its not like it will run ever cam on the market. Useally the chepper ones for like $30 are more of a risk than the $50 - $100 ones.

---

quote:

---

Originally posted by DJeX
Then either find its drivers to control it or find a whole in either the cams program or Windows. And its not like it will run ever cam on the market. Useally the chepper ones for like $30 are more of a risk than the $50 - $100 ones.

---