Malicious program 'indicator' added. Its executable is copied to /bin.
As a result of return-to-libc attack the vulnerable application (ncompress or
polymorph) will jump to /bin/indicator program (instead of jumping into
shell as we do in other attack)