Rootkits wreck havoc. Or do they?

The AusCert annual computer crime survey has some very alarming statistics: One in five corporate networks and twice as many public sector systems are infected with rootkits.

That's a serious statement. A rootkit is a set of files that hides itself deep in the system and is very difficult to find, they are often installed by spyware or hackers to take control of a system without the user knowing. One of these on your system means you have been bad infected with a virus, spyware or something much worse.

Personally, I don't believe a word of it. Given most corporate networks have some degree of security, if 20% of them were infected we'd be seeing 50% of home systems likewise affected. Tens of thousands of Australian computers would be pumping out spam, attacking the Pentagon and being a generally nuisance.

I suspect the replies to the survey have been misinterpreted. Many system administrators might have said "yes, we've had a virus infection" because they found a few java.byte trojans in a contractor's Mozilla cache. Either way, it's a silly and hysterical statement which the media thankfully hasn't picked up.

Mind you, I might use it in our market to scare up some work.

Only joking. Maybe.