Apropos collects system information and data on a user's browsing habits and sends the information back to the application's creators.
It is also capable of recording keystrokes and launching a denial of service attack, and can download and install additional software on an infected computer.
Sony used a rootkit to hide the technology, preventing users from uninstalling the application.
Hackers originally started using rootkits to build backdoors into computers, but the technology has caught a second wind in recent months as malware creators use rootkits to hide worms and spyware from antivirus and anti-spyware software.
In F-Secure's ranking Apropos surpassed the Sony BMG rootkit in the number of infections.
But the tool is lacking in sophistication, hiding processes from the task manager in Windows but not the actual files.
Hacker Defender, however, is considered one of the more nefarious rootkits. Specialised rootkit creators offer custom versions of the tool for sale, making it hard to detect.
Hacker Defender is therefore a popular rootkit for online criminals targeting corporate servers, where they can expect to find valuable data such as trade secrets or customer information including credit card numbers.
Nvidia brings Turing microarchitecture into the high-end gaming segment
Did you make the shortlist for the UK's most respected IT event?
Latest Tesla news: Tesla share price continues to fall after Saudi Arabia's sovereign wealth fund is linked to investment in rival
SEC 'probe' takes its toll on Tesla as new research suggests that Tesla loses $6,000 on every $35,000 Model 3
RTX 280 Ti will come with 11GB of fast GDDR6 video RAM with a 352-bit memory bus offering 616Gbps