InfoJack
Threat LevelDamageDistribution

Effects 

InfoJack carries out the following actions:

• Spyware programs are applications that gather information about users' Internet habits and preferences. The data, when collected, is sent to the creators themselves or to third parties, either directly or after being stored on computer.

  Spyware can be installed either with or without users' consent, and either with or without their knowledge about the data gathered and/or the use of it.

Means of transmission 

Propagation through the exploits of remote vulnerabilities:

InfoJack carries out the following process:

• It spreads by attacking IP addresses obtained at random or from the network to which the infected computer belongs.
• It tries to access the IP addresses under attack by exploiting an existing vulnerability or through an open port.
• If it does this, it downloads a copy of itself onto the vulnerable computer.

Propagation through P2P programs:

InfoJack carries out the following process:

• It makes copies of itself in shared folders belonging to these programs.
• Other users of these programs can remotely access these shared folders. So, they voluntarily download onto their computer files created by InfoJack in the belief that they are useful or interesting applications, movies, images, etc. In fact, they are downloading copies of InfoJack onto their computers.
• When they run the downloaded file, these computers will be affected by InfoJack.

Further Details  

InfoJack has the following additional characteristics:

• It is 75776 bytes in size.