Access for sale: a new class of worm

摘要: The damage inflicted by viruses and worms has been limited the risks that come with more lucrative payloads. problem facing authors of self-reproducing malware is monetizing each intrusion requires author to risk communication infected system. Malware looking minimize maximize loot have better off carefully targeting trojan horses at a few systems time. However, this could change if infect large number using worm sell access other black hats. We introduce new type enables division labor, installing back door on system opens only when presented system-specific ticket generated worm's author. minimized because he need not communicate systems. This class attack increase incentives write create market for such specialized skills. In addition describing threat, we propose approaches defending against it.