Trojanised TrueCrypt serves up malware to Russian-speaking targets
Credit:
Until discontinued under mysterious circumstances last year, the open-source encryption tool TrueCrypt was pretty much the first choice for computer users looking to keep the contents of their hard drive out of the reach of unauthorised parties.
So I am fascinated to read a new technical report by Robert Lipovsky and Anton Cherepanov, security researchers at ESET, which brings to light that a Russian language version of TrueCrypt contains a secret backdoor trojan.
According to ESET, the Russian TrueCrypt website truecrypt.ru has been serving malware to visitors since at least June 2012, and timestamps attached to the malicious code binaries dates them back to April 2012.