Oops. Unreal IRC server has a backdoor.

[bobthebob1234]

Hi all,

This is very embarrassing…

We found out that the Unreal3.2.8.1.tar.gz file on our mirrors has been replaced quite a while ago with a version with a backdoor (trojan) in it.

Source: http://www.zdnet.com/blog/bott/linux-infection-proves-windows-malware-monopoly-is-over/2206

[ollie]

That's not great news, but it is one program not "Linux".

The programmers and maintainers of UnrealIRC have just learnt some valuable lessons. There are reasons for MD5 checksums and PGP/GPG signing and using limited accounts with secure access to servers. If these methods aren't implemented then problems can occur. Notice that CVS and pre-compiled versions weren't affected, just a tarball replaced on the main server.

[M-Saunders]

That is indeed a rubbish headline. If it was a Firefox or OpenOffice.org binary shipped with Ubuntu, then it would be a big deal. But an IRC server? Something that only 0.001% of people ever use?

M