Could Amazon's Cloud become a 'malware-fest'?

Cloud Computing could turn into a ‘malware-fest’ according to security consultants at Global Secure Systems.

Cloud computing allows software developers to access, compile and test software on a dynamic basis, without having to install the resources locally.

Researcher and developer Brett O’Connor has discovered that a BitTorrent client TorrentFlux can be installed on the Cloud – turning a user’s Cloud account into a harvester and host of BitTorrent files.

David Hobson, GSS’ managing director, said: “Using P2P programs like BitTorrent has always been a risky procedure for PC users owing to the issue of infections arriving along with the pirated software and other executables.

“Reports have just come in, in fact, that BitTorrent is hosting a malware-loaded version of the Apple iWork software.”

Using Amazon’s EC2 Cloud Computing service as a remote harvester and hosting system for BitTorrent files would allow hackers to harvest and host BitTorrent applications at high speeds with virtually nil chance of detection, Hobson warned.

This would bring P2P filesharing to a ‘whole new level’ and would be certain to increase the use of BitTorrent among experienced Internet users.

“The danger here is that companies may find their staff FTP-ing files from Amazon EC2 – a completely legitimate domain – to the firm’s computers, resulting in an internal computer infection,” Hobson said.

“The consequences of this do not bear thinking about.”