Hacktool.WCI

Hacktool.WCI

Updated:
11 May 2006
Risk Impact:
High
Systems Affected:
Windows

Behavior

Hacktool.WCI is a hacktool that intercepts SMB connections in a subnet.

Antivirus Protection Dates

  • Initial Rapid Release version 11 May 2006
  • Latest Rapid Release version 22 September 2016 revision 004
  • Initial Daily Certified version 11 May 2006
  • Latest Daily Certified version 22 September 2016 revision 025
  • Initial Weekly Certified release date 17 May 2006
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Hacktool.WCI is a hacktool that intercepts SMB connections in a subnet.

Once executed, it intercepts all network traffic connections in a subnet, including network traffic located in LAN segments separated by switches. This allows an attacker to record communicated via the intercepted connections; for example by use of a network packet analyzer.

The risk can also perform ARP spoofing and connection bridging.