Google hacker unveils more vulnerabilities in Kaspersky anti-virus software

Google expert Tavis Ormandy revealed on Tuesday that using antivirus software from Kaspersky Lab based in Russia ironically opens users to hacks they wouldn’t otherwise have been vulnerable to.

The Google hacker expert and member of the search giant’s Project Zero vulnerability research team revealed in his analysis of Kaspersky Lab’s antivirus software in his blog post. He said he analyzed and used Kaspersky software and immediately found several easy-to-exploit bugs that made it possible for a hacker to remotely manipulate the underlying computer codes.

His research results are quite alarming since it means the antivirus software we depend on to serve as a shield from outside hacks make us vulnerable to data theft instead. Ormandy’s research exposed how easily executable the hacks are. He said it’s as easy as sending an email to a target user or making him visit a website.

Ormandy said the bugs he found in Kaspersky antivirus software would most likely be exploited in highly profile attacks such as those the National Security Agency might carry out against terrorism suspects or spies.

Officials from Kaspersky Lab assured the firm’s clients and customers the bugs exposed by Ormandy’s in-depth research have been fixed in all of their products and solutions, reported Forbes Tech. They also said no case of exploitation has been reported as of yet. Officials further stated the firm’s developers are making the necessary adjustments to counter possible hacks.

Ormandy closed his research by recommending that antivirus developers create security sandboxes in their products. This additional feature will isolate downloaded files from the rest of the core parts of the computer’s operating system.

Kaspersky Lab Issues Red Alert for ShellShock (Credit: YouTube/Times Of India)

Contact the writer at feedback@ibtimes.com.au or let us know what you think below.