Suspicious Software Part 1: Credit Card Generators
Posted by Mario Vuksan on Sun, Feb 01, 2009
Spyware has generally taken to mean a low-tech malware that is more of a nuisance than threat, unless it tries to steal my personal data. And, given the sophistication of today's cybercrime gangs, spyware is below the belt. They are interested in rootkits, sophisticated botnet C&C protocols, etc.
Yet, we should look below the surface and ponder how bad would it be to find
Credit Card Generators in your Enterprise environment. It surely cannot be permissible according to the corporate policy. Even worse, there will be liability for damages generated by the rogue employee even though he may not possess an immediate threat to the company itself. Any software used for outright criminal activity, although not necessarily malicious from the IT security's perspective, should be controlled by Enterprise IT departments.