Hacker News new | ask | show | jobs
by brokenmachine 719 days ago
Unfortunately, it's not explained in the article how the malware was actually sent to users. I wonder how they did it.
3 comments

Especially because BitTorrent is mitm-resistant (uses hashes).. did they find a 0day in the client?
Or mitm your download of the .torrent file (and/or anchor link site)
Yeah, until any details are provided, I would just assume that the ISP already requires that users install some kind of software, and they just pushed the malware through that program.
The torrentfreak article seems more informative and has links to the source video report https://torrentfreak.com/south-korean-isp-infected-torrentin...

From what I understand of the autotranslation, the ISP planted the malware somehow and that malware interfered with the P2P system, but no mention of actually using the P2P protocol to spread the malware

https://news.jtbc.co.kr/article/article.aspx?news_id=NB12201...

You don't need to install any software to use the internet at home in Korea. You just get a modem that connects to fiber at one end and exposes an ethernet port (or wifi) at the other end. Just connect to that port and you're online immediately.

ISPs also provide TV and a bunch of other services, though, and some of them might require installing specific software in order to use on a PC. Or perhaps they hijacked an unencrypted download of someone else's software, most likely some component of the file sharing service in dispute.

I reckon they used a good old fashioned honeypot. Seed a torrent of some random popular content that also contains malware payload, and let users download it.