Skip to main content

uTorrent Security Flaw Gives Hackers Access to Your PC

hacker stealing data clipart

Hackers can use uTorrent’s web and desktop applications to download malicious code onto your PC. This gives them access to your downloaded files and browsing histories.

We all love using uTorrent for downloading tons of media & software files from the internet. Unfortunately, the hazards of using these peer-to-peer downloading apps are unknown to us.

A Google Project Zero researcher Tavis Ormandy has revealed some of the dangers of using these apps. According to Ormandy, those using BitTorrent or uTorrent have serious flaws, making them vulnerable to getting hijacked.

How it Works

The security issue is present in the Windows version of the software, through which hijackers can get access to your personal data. These hackers can resolve web domains while you’re downloading something, in a manner that gives them access to your PC’s internal storage.
They can execute remote code to inject malicious files in your Windows’ ‘Startup’ folder.  It will then automatically be launched every time your PC is rebooted, allowing them to tinker with your computer’s files such as your downloads and browser history.
If you are using an unpatched version of BitTorrent or uTorrent (which includes uTorrent web), your systems’ security is endangered.
Here are some precautions you can take to protect yourself.

How to Save Your Computer From Hijackers

As indicated by Ormandy, the latest release of uTorrent’s beta versions includes files that fix the flaw. However, he wasn’t sure whether all the necessary measures had been taken for making uTorrent’s Web version completely safe for use.
Tavis Ormandy
BitTorrent engineering VP, Dave Rees, said that they have updated both uTorrent and Bittorrent. A patch has been released which will protect the users from any such attacks.
Our fix is complete and is available in the most recent beta release (build 3.5.3.44352 released on 16 Feb 2018). This week, we will begin to deliver it to our installed base of users. All users will be updated with the fix automatically over the following days. The nature of the exploit is such that an attacker could craft a URL that would cause actions to trigger in the client without the user’s consent (e.g. adding a torrent).
Prior to Rees’ response, the below-mentioned three test case exploits were provided by Ormandy which showed how the hackers can use domain name system rebinding to enter your PC.
  1. uTorrent Web Vulnerability
  2. uTorrent Desktop Vulnerability
  3. uTorrent Desktop Vulnerability
As a simple solution to this problem, you should not use the Web and Desktop versions of uTorrent until decisive measures are taken by the developers behind the app.

Comments

Post a Comment

Popular posts from this blog

This startup is pairing the blockchain with farming

Ripe, a blockchain startup, is  showcasing  how the distributed ledger technology can be applied to farming and provide companies with important data on crops and throughout the supply chain. By combining a blockchain with purpose-built scanners and specialized sensors, the company is able to provide critical data that is easily communicated to partners, demonstrating why  blockchain is growing more popular  as a tool to be leveraged as part of an IoT solution. Blockchain is a key tool for the IoT because of how it combines data storage and communication in a trusted medium. A blockchain is a shared, distributed database  that acts as an immutable ledger, recording entries and verifying them across a number of independent participants. Once an entry is made, it’s marked with a unique hash code that places it sequentially in the ledger. In agriculture, this means that farmers can use sensors and handheld devices to gather data about crops like tomatoes...
Post a Comment
Read more

Honda Launches the CR-V SUV in Pakistan

The 2018 Honda CR-V has been launched in Pakistan and it looks charming. Honda has finally launched the 2018 Honda CR-V in Pakistan. This Sports Utility Vehicle (SUV) has proven to be pretty popular around the world with an average of 300,000 units sold annually. In Pakistan, the Honda CR-V is gaining the popularity and attention of local auto enthusiasts. Honda CR-V 2018 was recognized as ‘2018 Motor Trend SUV of the year’ recently as well. The international model of CR-V has these four variants: Honda CR-V LX (Standard), Honda CR-V EX, Honda CR-V EX-L, Honda CR-V Touring. The CR-V offers pretty great features when you look at it. Let's take a look at what Honda Compact Recreational Vehicle (CR-V) has to offer. Exterior Because of its shiny new sporty-looking exterior, the vehicle is placed in small sports utility vehicle’s category. The exterior, no doubt, makes you want to look twice as some modifications to the previous model have been made. ...
Post a Comment
Read more

Samsung Launches Mid-Range Galaxy Wide 3

HANDSETS Check out Samsung’s new low-mid segment smartphone, the Galaxy Wide 3 with 3300 mAh battery and a 5.5-inch display. Samsung unveiled Galaxy Wide 3 for the South Korean market featuring low-mid specifications, and a design much similar to the well-known Galaxy J series. It does not follow the sweet bezel-less display trend, albeit comes with decent specifications for all those Samsung fans out there. Design & Display As you’d expect, the design is fairly simple with large bezels that house Samsung’s signature hardware button configuration, with the company’s latest icons for the back and menu button. The volume rocker looks modern and is housed on the left edge of the phone. The display is a 5.5-inch HD (720 x 1280) unit, an IPS LCD, with no edge-to-edge aesthetic. Huawei Unveils 8e Youth With a Tall Display & Android Oreo For Cheap Hardware & Storage The Galaxy Wide 3 is powered by Samsung’s Exynos 7870, octa-core, clocked at 1.6 G...
Post a Comment
Read more