A computer virus that targets the popular file-sharing program Winny isn't the most destructive bug or even the most widespread. But it's the most talked about in Japan as it generates headline after headline, month after month.
The malware, called "Antinny," finds random files on Winny users' PCs and makes them available on the file-sharing network. So far, the data leaked have been varied and plentiful: passwords for restricted areas at airports, police investigations, customer information, sales reports, staff lists.
The constantly updated virus seems to have spared no one -- airlines, local police forces, mobile phone companies, the National Defense Agency. Even an antivirus software manufacturer has suffered.
PHOTO: AP
"The virus has been quite effective in getting information off a user's computer and onto the Internet. The data is supposed to be secret, so people are quite sensitive about it," said Tsukuba University computer scientist Kazuhiko Kato.
Compared to attacks on Microsoft Corp's Windows software, the scope of the Antinny outbreak is narrow. But the Winny mess has caused an enormous brouhaha in Japan.
Antinny also may have the dubious distinction of being the first virus to exploit the nature of file-sharing itself -- in Japan, if not in the world, said Mamoru Saito of Telecom Information Sharing and Analysis Center (ISAC) Japan. Other viruses and spyware are often found on such networks, though none appears to take advantage of the underlying technology to spread personal data.
And while Antinny's writers seem to be limiting themselves to Japanese file-sharing software for now, he said, the code theoretically could be modified to attack other file-sharing networks such as Gnutella and BitTorrent.
The outbreak has triggered a broad damage-control effort by government and businesses. They have banned Winny from in-house computers and fired employees who use it on them. They've also demanded that staff not take work home and delete Winny from any home PCs used for work.
"The most secure way to prevent the leakage of information is not to use Winny on your computer," Chief Cabinet Secretary Shinzo Abe, the government's top spokesman, told reporters.
But the outbreak shows little sign of abating.
"The problem has shown that many people just don't know how to use the Internet safely," said Takeshi Sato of the government's National Information Security Center.
File-sharing programs like Winny are used to find and get files -- from music to video to documents -- from the computers of other people also using the software. The PC owner typically has control over what is made available by limiting sharing to a specific folder.
The virus takes advantage of this culture to propagate itself by playing a "social" trick on users, said ISAC Japan's Saito.
When the virus is activated on a computer, it first chooses a new name for itself by taking the names of other files users are likely to be searching for -- usually photos or music. The resulting new name becomes so long that, under normal Windows' settings, the three-letter file extension that indicates the type of file disappears from view, he said.
Careless users who download the file will see only the name and think it is something they wanted -- say, a photo of a favorite movie star. They don't see that they are actually trying to open an application.
When they do, the virus then looks on the computer for the Winny application, grabs random files off the hard drive and uses Winny to make those files -- and itself -- available for download on the network.
And so the cycle repeats.
New strains of Antinny appear all the time. Software maker Trend Micro listed 46 variations of the virus in its database as of mid-May. Trend itself lost sales data due to a Winny leak in 2005.
"Just keeping your antivirus software up to date isn't enough, because the updates can't keep up with all the new strains of the virus," the government's Sato said.
The government's concerns about Winny go beyond viruses. It's often used to share files -- and that often means illegally exchanging copyrighted materials.
Winny was already on the government's radar screen in November 2004, when a user of the program was handed a three-year suspended sentence on charges of violating copyright laws.
But now it is confidential data rather than hit songs that have Winny back in the spotlight.
Japan Airlines, for example, discovered last December that an Antinny-infected computer owned by one of its co-pilots leaked passwords for restricted areas at 16 airports around Japan as well as Guam's international airport. The airline was forced to alert the airports to have passwords changed as a precaution.
NO-LIMITS PARTNERSHIP: ‘The bottom line’ is that if the US were to have a conflict with China or Russia it would likely open up a second front with the other, a US senator said Beijing and Moscow could cooperate in a conflict over Taiwan, the top US intelligence chief told the US Senate this week. “We see China and Russia, for the first time, exercising together in relation to Taiwan and recognizing that this is a place where China definitely wants Russia to be working with them, and we see no reason why they wouldn’t,” US Director of National Intelligence Avril Haines told a US Senate Committee on Armed Services hearing on Thursday. US Senator Mike Rounds asked Haines about such a potential scenario. He also asked US Defense Intelligence Agency Director Lieutenant General Jeffrey Kruse
INSPIRING: Taiwan has been a model in the Asia-Pacific region with its democratic transition, free and fair elections and open society, the vice president-elect said Taiwan can play a leadership role in the Asia-Pacific region, vice president-elect Hsiao Bi-khim (蕭美琴) told a forum in Taipei yesterday, highlighting the nation’s resilience in the face of geopolitical challenges. “Not only can Taiwan help, but Taiwan can lead ... not only can Taiwan play a leadership role, but Taiwan’s leadership is important to the world,” Hsiao told the annual forum hosted by the Center for Asia-Pacific Resilience and Innovation think tank. Hsiao thanked Taiwan’s international friends for their long-term support, citing the example of US President Joe Biden last month signing into law a bill to provide aid to Taiwan,
China’s intrusive and territorial claims in the Indo-Pacific region are “illegal, coercive, aggressive and deceptive,” new US Indo-Pacific Commander Admiral Samuel Paparo said on Friday, adding that he would continue working with allies and partners to keep the area free and open. Paparo made the remarks at a change-of-command ceremony at Joint Base Pearl Harbor-Hickam in Hawaii, where he took over the command from Admiral John Aquilino. “Our world faces a complex problem set in the troubling actions of the People’s Republic of China [PRC] and its rapid buildup of forces. We must be ready to answer the PRC’s increasingly intrusive and
STATE OF THE NATION: The legislature should invite the president to deliver an address every year, the TPP said, adding that Lai should also have to answer legislators’ questions The Chinese Nationalist Party (KMT) yesterday proposed inviting president-elect William Lai (賴清德) to make a historic first state of the nation address at the legislature following his inauguration on May 20. Lai is expected to face many domestic and international challenges, and should clarify his intended policies with the public’s representatives, KMT caucus secretary-general Hung Meng-kai (洪孟楷) said when making the proposal at a meeting of the legislature’s Procedure Committee. The committee voted to add the item to the agenda for Friday, along with another similar proposal put forward by the Taiwan People’s Party (TPP). The invitation is in line with Article 15-2