Austrian police to use crime-busting Trojans

Austrian government approves use of Trojans to remotely monitor criminal suspects

The Austrian Police has become the latest European agency to express its intention to use specially-crafted Trojans to remotely monitor criminal suspects.

According to reports in Austrian media, the minister of justice Maria Berger, and Interior Minister Gunther Plater, have drafted a proposal that will be amended by legal experts and the cabinet with the intention of allowing police to carry out such surveillance legally with a judge's warrant.

There doesn't appear to be a defined timescale for such a law, and it is not clear whether the move would face the legal challenges encountered by the German authorities in the last year as they attempted to get a similar law off the ground. According to Berger, Trojans would only be used in cases of serious crime, such as terrorism and organized racketeering.

The Swiss authorities have declared the intention of using the same controversial technique, but only in cases of the most extreme nature, such as terrorism.

One formidable hurdle is that opinion in the security software industry is almost universally hostile to the idea. You don't have to dig far to find negative reaction.

"I'm sure the Austrian Secret Service will develop some pretty ingenious software to infect users' PCs, but there is a real danger that the package could leak into the hacker community," said Geoff Sweeney of security outfit Tier-3, which went to the bother of putting out a release on the topic.

"That scenario would create a serious free-for-all on the industrial espionage and identity theft fronts as legitimate Trojans are redirected to create an even more hostile environment for organizations to defend against," he said.

The authorities have been keen to portray the use of Trojans as similar to phone-tapping, a long established police practice the world over. However, Trojans are different on one important respect from phones, and this is where the anti-malware companies sense trouble.

"How should anti-virus companies react to the existence of such malware? Detect it? Avoid detecting it on purpose? Avoid detecting hacking software used by governments of which country? Germany? USA? Israel? Egypt? Iran?," commented F-Secure's Mikko Hypponen in a blog earlier this year.

The Austrian, German and Swiss governments have yet to explain how they would circumvent security programs that might be used by criminals to protect themselves, whether this would involve collusion with security software companies, and what would happen if such software-busting Trojans were subsequently reverse engineered and deployed by criminals themselves.

"The anti-virus companies aren't going to turn a blind eye to state-endorsed Trojan horses," said Graham Cluley of Sophos, himself a good barometer of likely industry opinion.

"We're going to add detection for them just like any other spyware. So, if the cybercops think they can give us a funny handshake, a wink and buy us a pint for not adding detection for the Trojan they're using to spy on their suspect they're mistaken.

"The reason why we take that policy is that we can't know if the Trojan has been placed there by the cops or a criminal. It's unlikely that the Trojan will say 'Copyright (c) FBI 2007'," he said.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

John E. Dunn

Techworld.com
Show Comments

Essentials

Brother MFC-L3745CDW Colour Laser Multifunction

Learn more >

Mobile

Exec

Sony WH-1000XM4 Wireless Noise Cancelling Headphones

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?