"Federal Trojan"
The Chaos Computer Club (CCC), a well-known German hacker group, on Saturday announced its analysis of the so-called "Bundestrojaner," or "Federal Trojan," had revealed that this "lawful interception" program goes far beyond what normally would be allowed under German law.
"The malware can not only siphon away intimate data but also offers a remote control or backdoor functionality for uploading and executing arbitrary other programs," wrote the organization in an English-language post on its website. "Significant design and implementation flaws make all of the functionality available to anyone on the Internet."
The spyware could even be used to plant evidence on a computer. "Functions clearly intended for breaking the law were implemented in this malware," the CCC asserted.
The CCC, which came across the software through an anonymous tip, alleges the Trojan was developed by German police forces for intercepting personal data from computers, including those of private individuals.
Earlier Monday, Constanze Kurz of the CCC told German public radio that the group was "quite sure" the German government had developed the malware.
"We have no doubt, otherwise we wouldn't have gone public with it," she said.
The CCC's analysis showed that the Trojan can log keystrokes, take screenshots, record Skype conversations and even activate webcams or computer microphones to survey private happenings inside a person's home.
What's worse, the CCC said, is that poor data encryption protocols in the Trojan could allow the software to be used by third parties.