Spy code creator kills project after Syrian abuse

Syrian protest Opponents of the government in Syria have been spied on using many different hi-tech tools

Related Stories

Widely used security software has been discontinued after its creator discovered the Syrian government was using it to spy on its opponents.

The "disgusting" way the DarkComet Remote Admin Tool (Rat) was being used in Syria had led to its production being halted, said Jean-Pierre Lesueur.

He said his intention had only ever been to produce tools that were better than those commercially available.

Experts welcomed DarkComet's demise, saying the Rat was being widely abused.

Syria's use of the tool emerged earlier this year as the government sought to keep tabs on opponents in the country's ongoing civil conflict.

Once DarkComet is installed on a target PC it allows remote access to that machine and can log any activity on it.

The Syrian government attempted to use this function of the Rat by trying to trick its opponents into opening a booby-trapped Skype chat message.

In a message posted to the DarkComet website, Mr Lesueur said he was ending the project after four years of work because of the widespread "misuse of the tool".

He said it was never his intention for the tool to be used by hacker groups and he did not want to be held responsible for what people, and governments, had done with DarkComet.

Mr Lesueur said he would continue working in computer security but only on projects that could not be turned to malicious ends.

Rat poison

The decision to shut down DarkComet means there will be no future versions, but nothing has been done to remove copies of the programs already in use.

Rik Ferguson, director of security research in Europe for Trend Micro, said he and many other professionals had used DarkComet for penetration testing and malware detection but not as a management tool.

However, he said, the overwhelming use of DarkComet was by those with malicious or dubious intentions. He said some of the tool's menu items and functions made it hard to believe it was intended entirely for legitimate use.

"It was no surprise to hear of the Syrian regime using this Rat to spy on their population," Mr Ferguson told the BBC. "It follows in the grand tradition of using Rats in targeted, politically motivated attacks such as LuckyCat, Gh0stnet and Shadownet."

He added: "It's not often you can welcome the demise of anything, however, let's hope DarkComet is only the first Rat to take the poison."

More on This Story

Related Stories

The BBC is not responsible for the content of external Internet sites

More Technology stories

RSS

Features & Analysis

  • Stained glass of man with swordFrance 1 England 0

    The most important battle you have probably never heard of


  • Golden retriever10 things

    Dogs get jealous, and nine more nuggets from the week's news


  • Pro-Israel demonstrators shout slogans while protesting in Berlin - 25 July 2014Holocaust guilt

    Gaza conflict leaves Germans confused over who to support


  • The emir of Kuwait Sheikh Sabah al-Ahmad al-Jaber al-SabahFreedoms fear

    Growing concern for rights as Kuwait revokes citizenships


BBC Future

(NASA)

The five greatest space hacks

We present the ultimate in DIY fixes Read more...

Programmes

  • Leader of Hamas Khaled MeshaalHARDtalk Watch

    BBC exclusive: Hamas leader on the eagerness to end bloodshed in Gaza

BBC © 2014 The BBC is not responsible for the content of external sites. Read more.

This page is best viewed in an up-to-date web browser with style sheets (CSS) enabled. While you will be able to view the content of this page in your current browser, you will not be able to get the full visual experience. Please consider upgrading your browser software or enabling style sheets (CSS) if you are able to do so.