Home / malware

PDF

Rogue:W32/DotTorrent.A

First posted on 28 April 2010.
Source: SecurityHome

Aliases :

There are no other names known for Rogue:W32/DotTorrent.A.

Explanation :

A trojan, or trojan horse, is a seemingly legitimate program which secretly performs other, usually malicious, functions. It is usually user-initiated and does not replicate.

Additional DetailsRogue:W32/DotTorrent.A identifies a trojan which displays fake messages indicating an "Antipiracy foundation scanner" has discovered torrent files on the computer violating the copyright of the file's respective owners. This is an attempt to frighten the user into paying money to a (fictional) organization, ICPP, supposedly to pay for the copyright violation fine and for a 'legal license purchase'.

The trojan's extortion scheme qualifies this malicious program as a type of Ransomware.

DotTorrent's activities are more thoroughly discussed in the following F-Secure Labs blogpost:

€ ICPP Copyright Foundation is Fake

Execution

On execution, the trojan displays a message box that purports to be a 'copyright violation alert':



The user is then directed to a website where payment may be made for the alleged violation.

Last update 28 April 2010

 

TOP