22.03.2013 Views

The Rootkit Primer - Below Gotham Labs

The Rootkit Primer - Below Gotham Labs

The Rootkit Primer - Below Gotham Labs

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Case Study : Vodafone Greece<br />

C2<br />

Established a back door that offered update features<br />

Surveillance<br />

Created duplicate streams of digitized voice traffic<br />

Concealment<br />

Bypassed the official interface to avoid a log trail<br />

Patched 29 different blocks of code<br />

Modified the tools that display executing blocks<br />

Hence, their code was not visible to the administrator<br />

Sidestepped the central registry (which was audited)<br />

Did so by storing phone numbers in a private data store<br />

© <strong>Below</strong> <strong>Gotham</strong> <strong>Labs</strong>, 2009<br />

48

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!