Blue Pill (malware)
From Wikipedia, the free encyclopedia
Blue Pill is the codename for a rootkit based on virtualization technology that targets Microsoft's Windows Vista operating system. Blue Pill uses AMD Pacifica virtualization technology, but, according to its author, it could as well be ported to use Intel VT. It was designed for academic use by Joanna Rutkowska and demonstrated at a Black Hat Briefings on August 3, 2006.
By using Pacifica, Blue Pill would be able to trap a running instance of the operating system into a virtual machine. Blue Pill would then act as an hypervisor, with complete control of the computer. Besides, Joanna Rutkowska claims that such a rootkit would be "undetectable by design", since any detection program could be fooled by the hypervisor.
However, there is great doubt throughout computer security circles as to whether Blue Pill is real or a mere stunt, since details and a working sample of the source code have not been made available, contravening the industry wide standard of full disclosure.
The name Blue Pill is a reference to the bluepill from the The Matrix film trilogy.
[edit] References
- Introducing the Blue Pill by Joanna Ruthkowska
- InternetNews - Blackhat takes Vista to Task
- Heading Off the Hackers Business Week, August 10, 2006
- Blue Pill Episode 54 of the Security Now Podcast
- Black Hat 2006 Presentation
- Debunking Blue Pill Myth
 |
This malware-related article is a stub. You can help Wikipedia by expanding it. |
