Badware is short for Blocked Adware

Last week an article that I collaborated on was published. So far this has been the crowning achievement of my short time with Cisco, a short but amazing time. Malware analysis is my absolute passion and being able to turn software analysis into globally deployed protection in days is the best.

When I was presented with a strange piece of software I knew it would be another excellent chance to tear into the inner workings of a tool. I didn't know yet it would be the basis of an article to a professional Threat Intelligence blog. I really didn't know the splash it would make across digital media.

In no particular order I will list all of the references that I can find to that article (these links are not endorsement, nor disparagement, of the linked article!):

• Cisco accuses Tuto4PC of deliberately spreading malware to 12 million PCs
• Tuto4PC Slams Cisco’s Claim The Company Infected 12 Million Computers
• Cisco: 12 Million Computers Infected By Tuto4PC Malware
• French outift installs back-doors in 12 million PCs
• TUTO4PC UTILITIES SILENTLY INSTALL 12M BACKDOORS, CISCO
• Cisco Accuses French Software Maker of Installing Backdoors on 12M Computers
• 'Wizz' kids: Talos researchers pinpoint French firm as source of spyware-adware threat
• Adware from French runs away and hides on 12M machines
• Top Story: 12 million duped into downloading malware that steals your information
• Cisco researchers find backdoor installed on 12 million PCs
• Malware menace with 'scary' backdoor strikes 12 million machines
• Cisco Finds Backdoor Installed on 12 Million PCs

Non-English:

• Cisco accuse le français Tuto4PC de diffuser un malware
• Sécurité : Cisco tacle les méthodes agressives du Français Tuto4PC (MAJ)
• Tuto4PC, Cisco accuse la firme française d’installer des backdoors sur des millions d’ordinateurs
• Компания из Франции спрятала бэкдор в 12 миллионах компьютеров
• Un desarrollador de software francés acusado de instalar backdoors en 12 millones de ordenadores
• Cisco: Frans bedrijf plaatst backdoor op 12 miljoen computers
• Ερευνητές της Cisco βρήκαν κερκόπορτες σε 12 εκατομμύρια υπολογιστές

The discussion of it has not only been limited to news sites:

• A slashdot discussion:
• Slashdot: Cisco Finds Backdoor Installed On 12 Million PCs
• A malware analysts personal blog:
• I Heart Malware!

I was most touched by the brief shout out on the blog of Mary Ellen, @icanhaspii. Media is great, but recognition from a practitioner means far more to me than a big pile of media comment.

This being a personal blog nothing contained in this article should be construed as anything except my personal opinions. I do not speak for, nor represent, Cisco.

Updated Links:

• Tuto4PCs might be pushing backdoor access with their software