Symantec has admitted that blueprints for current versions of its pcAnywhere software were stolen in 2006 and that all users are at risk of attack and should pull the plug.

That includes users of both current and past iterations as well as those bundled with Altiris and the pcAnywhere Thin Host packaged with backup and security products.

The theft came to light when an Indian hacking group calling itself the Lords of Dharmaraja threatened to publish the source code.

The gang's apparent spokesperson, who goes by the name of "Yama Tough," posted code from the 2006 version of Symantec's Norton AntiVirus to PasteBin and subsequently wrote about the breach on Google+.

It was originally unclear whether the breached source code was relevant to up-to-date installations of Symantec's anti-virus products.

The confusion has lifted, showing that the danger to users of current products is all too real.

Continue reading SOPHOS article

Source: nakedsecurity.sophos.com - by Lisa Vaas on January 25, 2012