Orbit Downloader
Orbit Downloader is a freeware, proprietary and graphical download manager with a hidden function of performing DDoS attacks carried out without the user's consent and knowledge[2], available for Windows family operating systems. One of the main lures to install the program is the ability to download video files from sites such as YouTube, Dailymotion and Metacafe. Since version 4.1.1.5, Orbit Downloader has included an orbitdm.exe component, which connects to the program's website, from where it gets two addresses. From one it downloads the location of the malicious DLL file, while from the other it gets more addresses.
Developer(s) | Innoshock |
---|---|
Initial release | 8 November 2006 |
Final release | 4.1.1.19[1]
/ 17 January 2014 |
Operating system | Microsoft Windows |
Platform | IA-32 |
Type | Malware (originally download manager) |
License | Malware (originally adware) |
Website | orbitdownloader.com (Offline) |
The DLL takes a veiled configuration and performs DDoS attacks on targets provided within it[3]. Eset classifies it as a Trojan Win32/DDoS Orbiter.A[4].
Officially, the program supports protocols:
- HTTP
- HTTPS
- FTP
- Metalink
- RTSP (Real Time Streaming Protocol)
- PNM
- MMS (Microsoft Media Services)
- RTMP (Real Time Messaging Protocol)
Orbit Downloader works with many browsers, including: Opera, Mozilla Firefox, Microsoft Internet Explorer, Maxthon, Netscape and Google Chrome.
References
change- ↑ "Orbit Rich Media Downloader Changelog". Archived from the original on 27 July 2018.
- ↑ http://www.welivesecurity.com/2013/08/21/orbital-decay-the-dark-side-of-a-popular-file-downloading-tool/ Orbital Decay: the darkweb of a infamous file downloading tool
- ↑ http://www.dobreprogramy.pl/Popularny-Orbit-Downloader-DDoSowal-na-zamowienie,News,45945.html Popular Orbit downloader DDoS-ed to order
- ↑ "Win32/DDoS.Orbiter.A". ESET Virusradar.
Other websites
change- Orbit Downloader (offline)