Back Orifice 2000 (BO2K)
¨Trojan horse backdoor http://www.bo2k.com
¨May be legitimately used for system administration
¨Product of Cult of the Dead Cow hacker group
¨Released at DefCon 7 conference in 1999
¨Video at http://www.uberspace.com
¨Can undermine Windows 9x/ME and Windows NT/2000
¨BO2K server code 100Kb
–Can listen to any TCP or UDP port
–Original Back Orifice listens to UDP port 31337
¨BO2K GUI client code 500Kb
¨
¨
¨