« January 2006 | Main | March 2006 »
February 23, 2006
InqTana Bluetooth Worm
Trifinite.group member Kevin has published a paper detailing the techniques he used in the development of the InqTana Bluetooth worm that targets vulnerable Mac OS X systems. There has been significant confusion surrounding this worm, so here are some salient points:
- The concurrent release of the OS X Leap.A and InqTana.A worms is coincidental
- There is no conspiracy, AV vendors and Apple were notified about Kevin's progress in developing this worm in advance of making details publicly available
- Both 10.3 and 10.4 systems are vulnerable until patched with APPLE-SA-2005-05-03 and APPLE-SA-2005-06-08
- InqTana prompts before infecting *by design*, Kevin was just trying to be nice, but the worm could easily spread silently
Kevin's paper is available at http://www.digitalmunition.com/InqTanaThroughTheEyes.txt. Comments can be directed to the BlueTraq mailing list. Our sympathies to those organizations who were affected by the false-positive signatures published by overzealous AV companies.
Posted by Joshua Wright at 01:11 PM | Comments (0) | TrackBack
February 08, 2006
New trifinite.goupmember (again)
Last week, Joshua Wright joined the trifinite.group. Josh brings in a lot of experience with Wi-Fi technology and showed to have the right thinking-patterns for being part of the group :)
Check out Joshua's page for details.
Posted by Martin Herfurt at 08:50 PM | Comments (0)
February 04, 2006
Bluetooth Security Workshop
Adam, Marcel and I will hold a Bluetooth Security workshop on 17th of February in London. So if you are interested in participating make sure to register.
Posted by Martin Herfurt at 06:57 PM | Comments (0)