Well well, look what we have here:
http://www.informationweek.com/story/showArticle.jhtml?articleID=173601761&pgno=1
Just a little taste:
"In other Sony BMG news, a slew of security firms warned Thursday of the first appearance of malware that uses Sony's rootkit to hide from anti-virus programs.
Dubbed "Backdoor.Rycos" by Symantec and "Stinx.e" by Sophos, the Trojan arrives as an attachment to an e-mail purportedly from a British business publication. If the attachment is launched, the Trojan copies itself as "$sys$drv.exe" to the hard drive. Any file beginning with "$sys$" is automatically cloaked by the XCP rootkit.
As early as a week ago, hackers were already discussing ways to use the XCP rootkit, but Stinx.e is the first proof of their work.
"Sony's DRM copy protection has opened up a vulnerability which hackers and virus writers are now exploiting," said Graham Cluley, senior technology consultant for Sophos, in a statement Thursday. "We wouldn't be surprised if more malware authors try and take advantage of this."
The Trojan opens a backdoor on the compromised PC, and takes commands from its controller to, for instance, install additional files or delete data."