Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms

-2
votes
0answers
43 views

Good book about creating malware, not just analyzing it [on hold]

Good book about creating malware, not just analyzing it. I've been looking at a practical book on how malware works and how it is implemented. Most books I've seen just tell from a high-level ...
0
votes
1answer
34 views

What is the difference between YARA and CLAMAV?

Can any one explain the difference between YARA and ClamAV ? Are they just two different ways of writing AV or Malware signatures ?
0
votes
1answer
71 views

How to identify which storage USB device is BadUSB-free at store?

Are there certain things I can look for when buying a new external hard drive or flash drives to ensure that the one I purchase does not contain BadUSB? Would popular commercial brands, such as ...
7
votes
1answer
154 views

Can virtual machines be used to isolate vulnerable software?

I have had a look at most of the previous questions about virtual machines (VMs) and they all appear to be focused on hosting malware in the VM and preventing it breaking out of the VM. What I can’t ...
-3
votes
0answers
24 views

My site is being redirected to an app site when anyone tries to access site from an ipad [closed]

My website is being redirected to this site: apps.rumobi.info
0
votes
0answers
42 views

Malware or exploit kit without escalation kit

Does anyone know of any malware or exploit kit that do not use a privilege escalation kit and just do malicious things with an unprivileged permission?
2
votes
1answer
39 views

Strange requests coming from EA4350 Linksys routers

I have had two Linksys EA4350 Routers for a week or so being used internal my network as wireless access points, and all of a sudden I started noticing requests from them once per minute (care of my ...
1
vote
3answers
59 views

running malware - add exclusion?

I am having so many problems with my laptop and have 8 malicious items detected and 4445 non malware items detected is it better to quarantine or add exclusion I am Not sure what at exclusion means ...
-4
votes
1answer
82 views

Becoming a malware analyst for Android or Windows?

Which would be considered for a person starting in malware analysis to go into, Android or Windows malware analysis? Which is easier? I prefer something that is easy and at the same time a good ...
2
votes
3answers
114 views

How are 1x1 pixel images used in a malicious context?

I have been analyzing malware and I am seeing many 1x1 png and gif files. What could these be used for?
1
vote
2answers
31 views

unprivileged or privileged malware for botnets

For those malwares which are used to organize botnets to DDOS a website, they just need to send and receive HTTP packets. Do they need to be privileged? If they dont need to be privileged, is it true ...
8
votes
0answers
181 views

Malicious PDF Analysis

I have been analyzing a PDF I suspect to contain malicious content. For the most part, I've always trusted automated tools to determine if a PDF was safe to open. However, my eyes have been opened to ...
2
votes
1answer
92 views

Is it possible to get malware through an incoming video/audio stream? (e.g. Omegle, Skype etc.)

just a quick question. Is it possible for incoming video/audio streams to contain malware etc. through exploits in the transfer of the video/audio? Thanks in advance.
-1
votes
2answers
60 views

Open Source Malware Scanner/Cleaner [closed]

What is the best Open Source Malware Scanner/Cleaner? Malware-bites is good but it requires licensing for companies.
1
vote
1answer
66 views

Recovering From Suspected MPEG Malware Attack

Against my better judgement I foolishly opened an MPEG video emailed to me from a friend's email address because the topic in the email was something we had recently discussed. I am fairly certain ...
-1
votes
0answers
12 views

Root in Android is connecting to SoftLayer Technologies! [migrated]

I was reviewing what programs are connecting to the internet on my Android Nexus 5, and I saw that Root had already disconnected from the connection to SoftLayer Technologies, inc (IP 108.168.176.245 ...
1
vote
1answer
59 views

Microsoft OneNote being detected as Malware

I am helping a friend install OneNote 2013 64-bit on their Windows 7 (64-bit, SP1) system. We went to the official Microsoft OneNote website, www.onenote.com, clicked on 'Windows' (just to the right ...
2
votes
1answer
284 views

Questions on reflected file download (RFD) attack

I read this article, and the whitepaper by security researcher Oren Hafif which mentions the following salient points: RFD, like many other Web attacks, begins by sending a malicious link to a ...
1
vote
1answer
90 views

Sticky keys on RDP

A recent report on page 18 states that: [black hats] have even leveraged [systems administration tools] as a means of maintaining additional persistence via setting “sticky keys” for RDP sessions. ...
0
votes
1answer
340 views

CloudFlare - prompted for “attention required”

I am getting a CloudFlare - attention required / security check prompt on most of the sites I visit through my Macbook running OS X Yosemite, these sites work perfectly on other devices (such as iPad, ...
5
votes
1answer
154 views

Are the top ten flashlight apps maliciously stealing data and sending it to China, India, and Russia? [closed]

There's an interesting report from a company called SnoopWall that is detailed in this YouTube video from a Special Report with Bret Baier with Fox News. In the report "Cybersecurity Expert" Gary ...
-1
votes
1answer
85 views

Home PC has been compromised remotely and even after cleaning my PC repeatedly, the problem still comes back, help please? [closed]

I'm a regular guy running two small franchise businesses with a basic understanding of computers etc, (very basic really), but I am certain my home network has been hacked and I am finding lots of new ...
0
votes
2answers
156 views

When MBR pirates grin as an indication of absolute pleasure!

Someone, have no idea who, really worked my computer, and placed some rootkit, all-knowing, all-smashing malware something and I simply cannot keep Windows OS clean in a multiboot configuration with ...
0
votes
2answers
64 views

Do common malware compromise recovery partitions?

Just about now a friend of mine got compromised, actually she was compromised by various adware since long ago but she installed something (her browser was hijacked to deliver even more malware) and ...
3
votes
1answer
1k views

Is bit.ly a malware distributor?

I clicked this link http://girlsguidetosurvival.wordpress.com/ Chrome gave me this warning - Attackers currently on bit.ly might attempt to install dangerous programs on your computer that ...
5
votes
1answer
386 views

Google Chrome browser warning for goo.gl

I am getting the solid red screen Chrome browser malware warning for Google's own URL shortening website, goo.gl as well as other sites such as bit.ly and delicious.com when I try to navigate there ...
0
votes
1answer
100 views

How to ensure a second hand computer is safe to use [duplicate]

I'm planning to buy a second hand computer (2012 Mac mini, which is no longer available in stores). Because I'm not sure if there is any malware in the computer so I will perform hard format several ...
0
votes
0answers
19 views

Infer encoding mechanism from n-grams distance

I have a series of obfuscated strings which across the set of strings have regions of high variance and regions of low variance (implying some encoding mechanism as opposed to an encryption procedure ...
3
votes
1answer
232 views

What happened with badBios [duplicate]

Maybe some of you remember that in November 2013 the respected researcher Dragos Ruiu claimed that he was infected by some super advanced virus that no one ever heard of before. Experts agreed that ...
2
votes
1answer
34 views

What method could a white-box attacker use to track the deletion of memory / files?

A rather theoretical question: Assuming there is memory with a malware inside it. The malware's goal is to detect if a legit application is about to delete contents of the memory. If recognized, the ...
1
vote
1answer
36 views

Javascript file detection

One common technique I use is xor bruteforcing on binary data. In this case, I would like a heuristic approach to determine whether or not any possible candidate plaintexts are javascript. This rules ...
0
votes
2answers
155 views

Fake phone call

I have a problem, getting call from known numbers and when he lifts it, no one is speaking from other side! Well, the awkward part is, the call is from known numbers only, but if I ask the person ...
14
votes
1answer
1k views

Why do exploit kits use droppers?

I've been looking into the structure of the online criminal underground, which consists of exploit kits, droppers, and malware payloads. What is the function of the dropper in this pipeline? Why ...
1
vote
2answers
207 views

Will Ad Block Plus block the ads that give someone Cryptowall 2.0?

Now I already know that making sure your browser plugins are either non-existent or up-to-date is one way of being on the safe side against ransomeware like Cryptowall 2.0; but since clicking ads are ...
1
vote
2answers
487 views

What agency digitally signed Cryptowall 2.0 so that it can run without being detected?

What agency issued a digital signature for the Cryptowall 2.0 ransomware virus? Is it too early to tell? As far as I know this is how Microsoft planned to prevent malware, by adding a digital ...
1
vote
2answers
83 views

Help understanding malware infection

I'm kind of a newbie to security and need help fully understanding how I would infect myself inadvertently. Let's say I was to download a .zip file attached to an email and I unzipped the contents. ...
1
vote
2answers
70 views

Manual malware / adware analysis after SEP scan

My company currently gets malware alerts from several source's i.e. Symantec Endpoint Protection and FireEye. When these alerts are triggered, a manual process of logging onto the user's machine is ...
2
votes
1answer
97 views

How Do I Troubleshoot a Browser Hijack on a Mac?

My Mac is getting weird redirects with Safari and Chrome, however not with Mozilla Firefox. Since I cannot find software to do malware removal on Apple products or any good information, I am at a loss ...
2
votes
1answer
114 views

Odd requests to health_check.js show up in Fiddler

I had Fiddler running and noticed that there are few calls made to following url: http://www.yimgr.com/health_check.js?ts=1412350007104 the content is just this JSON payload { "chance": 0.5, ...
1
vote
0answers
86 views

Can a hacker use someone else's IP address when running a scam?

I have a friend who works on a ship currently in Accra, Ghana. We do video chats but his system is extremely slow and sluggish. There have been times where our only form of communication is IM. A ...
3
votes
2answers
121 views

How can I recover files encrypted by Android ransomware?

My Samsung Galaxy Note II was infected by a virus called the "FBI virus." Fortunately, I've managed to remove the malware but my problem now is that all my files have been encrypted. How can I ...
3
votes
1answer
108 views

Dos Attack and other malwares!

I have been experiencing DoS attacks: ack scan and rst scan. Now I know these are supposed to be normal and the internet works that way but I experience severe internet disconnection when that ...
2
votes
2answers
75 views

Steps after getting hit with malware or browser exploits on Xubuntu

Well, today I was browsing the internet and I suddenly got redirected to a chinese hosted malware site and firefox started going crazy. I checked the url on virustotal with my phone and it found other ...
-4
votes
2answers
72 views

Can an compressed virus still do any harm to an OS [closed]

Let's say you have a piece of malware either as a standalone binary or hidden within a crafted image (two distinct cases). If I compress the standalone binary, can its mere presence as a compressed ...
1
vote
1answer
52 views

using multiple Firefox profiles to increase security

I am wondering whether it would increase security in any significant way, if I would use two separate Firefox profiles, one for normal browsing and the other for private/secure websites, such as my ...
0
votes
1answer
74 views

How safe are Firefox addons from official mozilla.org site?

I would like to install the Dictionary Pop-Up addon for Firefox. I usually don't install any addons, but this one looks especially tempting. I could not find any information on the Mozilla page, ...
1
vote
2answers
42 views
-2
votes
2answers
63 views

Can my Mac be affected without running the malware?

Can my Mac be affected by malware without running it? For instance, if I download a random file, but don't open it, can it infect my computer?
2
votes
3answers
94 views

Are externally referenced libraries (CDN's) a security issue?

Today I read about an alleged malware attack targeting jQuery.com A german blogger who is what I would call an expert on IT security stated that Any website that is working with ...
32
votes
4answers
5k views

Why does malware periodically check google.com

I'm looking at some malware PCAPs, e.g. http://malware-traffic-analysis.net/2014/05/27/index.html . One of the things I've been seeing frequently is requests to alexa top million sites (e.g. yandex, ...