Backdoor.Bofishy.C

Risk Level 1: Very Low

Printer Friendly Page|Rate this page

Discovered:: November 14, 2002
Updated:: February 13, 2007 11:52:28 AM
Also Known As:: tcpdump trojan
Type:: Trojan Horse
Systems Affected:: Linux, UNIX

Backdoor.Bofishy.C is a Trojan that affects the libpcap packet capture library and the tcpdump sniffer. It comes as modified source packages that create a backdoor process during their installation. The backdoor process attempts to contact the attacker's computer and give the attacker access to a shell on the local computer.

Antivirus Protection Dates

Initial Rapid Release version November 14, 2002
Latest Rapid Release version September 28, 2010 revision 054
Initial Daily Certified version November 14, 2002
Latest Daily Certified version September 28, 2010 revision 036
Initial Weekly Certified release date November 20, 2002

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Low

Distribution

Distribution Level: Low

Writeup By: Frederic Perriot

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16