3 ms·
>> Even a regular user with limited privileges can launch it, allowing it to intercept traffic and run commands on infected machines. >Huh, how do they do that?
by Maakuth 12y ago
>> Even a regular user with limited privileges can launch it, allowing it to intercept traffic and run commands on infected machines.
>Huh, how do they do that?
They must have some pretty powerful zero-day vulnerability they're exploiting. Expect patches.
- billyhoffman 12y agoExcept a few paragraphs up they say: "The trojan is able to run arbitrary commands even though it requires no elevated system privileges" This is just a terribly written article. Few if any tech details, and any tech language just doesn't make sense/contradicts itself. Sadly The this is another example of a larger downward trend in the quality of articles on Ars. They should use some of that sweet Conde Nast money and clone John Siracusa a few times!
- keypusher 12y agoI think they must be talking about privilege escalation via an undisclosed vulnerability. It "requires no elevated system privileges" to run, but if it is running arbitrary commands, it must have gotten those privileges somehow.