Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

0
votes
1answer
23 views

Bizarre HTTP requests to VPS, former malware command and control server?

I just bought a new VPS with Linode. I installed Apache and noticed some very strange behavior that I have been seeing consistently throughout the logs. So basically, I keep receiving stranger HTTP ...
0
votes
1answer
46 views

Google Chrome is redirecting before visiting a shopping website

I notice every few days (~5 days) that when I try to open an Amazon.in URL, before opening that URL, Chrome opens a different link which looks like an affiliate link. This link redirects to the actual ...
-1
votes
2answers
72 views

What are the odds of someone modifying binaries downloaded over HTTP?

I recently read that most software available on the Web isn't sent over HTTPS (even if the link is on an HTTPS page). This means that the binaries downloaded were never authenticated and could in ...
-1
votes
0answers
31 views

Malware from TPB(piratebay) infected my pc. I need to transfer my data into external hdd before wiping my hard drive [migrated]

OS: Windows (Primary), Ubuntu (secondary). Few days back I was using TPB(piratebay) obviously for educational purposes,even though I have ad-blocker at the time of browsing some advertisement did pop-...
11
votes
3answers
2k views

Would a (password + combination of images) be stronger for user's login regarding keyloggers?

The scenario: We have a login system for a web application that requires a plaintext password and 3 images (from a collection of images that the users select during registration, the images are ...
0
votes
0answers
30 views

How does quarantine feature work internally in antivirus? [duplicate]

I'm struggling to find out the internal encryption and details of quarantined file. if any body knows the information please share.
0
votes
0answers
38 views

I may have been compromised, now what?

How to trace and single out this Malware in Browser Extensions? Chrome/ Opera? I had installed the extension mentioned in the thread above. It contained Malware the redirected Java functions mainly. ...
2
votes
2answers
112 views

What is the meaning of this possible malware?

My hosting service was helping me to identify a problem, and we found the following possible malware (which, of course, we have removed). Unfortunately, I'm not terribly technical, and so I am ...
0
votes
0answers
17 views

Risk from browser add-ons?, from external sources [duplicate]

Can a user agent switcher read my passwords? what if it is not mallicious but weak, could it be a faultline for others to hack me?
5
votes
1answer
363 views

How to trace and single out this Malware in Browser Extensions? Chrome/ Opera?

There have been lot of articles about legitimate chrome/ opera extensions that get sold out to malicious parties that end up pushing the wrong kind of code down the pipe, since by default these ...
0
votes
1answer
56 views

Analyze attack as an outsider

Today I visited my favorite news outlet using Firefox on my Android and suddenly I got malicious .apk file downloaded to my phone. Of course, I immediately reported the incident to the site owner. ...
0
votes
2answers
38 views

Does a malware in an android phone have permission to read/modify/delete data of all the apps?

If an android phone is infected with malware/virus, can it access all the apps with modify/delete/read permission? Isn't there any control by an app , say a bank app which can't allow to read data by ...
0
votes
1answer
39 views

Yahoo for Chrome redirect? [closed]

I was on my computer, and when I opened chrome it goes to my email (I set it to my homepage), but sometimes it would take make a new tab and take me to a different site which was obviously looked very ...
0
votes
1answer
49 views

How to deal with possibility of viruses on Dropbox, Google Drive, external hard drive, etc?

For home use, what is the best way to deal with viruses that could be on external storage, which seems like a great way for hackers to persist on your system even after a reformat. Maybe the best ...
0
votes
1answer
57 views

How does malware downloaded by JavaScript get executed, and why would you distribute malware in a .js file?

I have two questions about JavaScript as an infection vector. The first one is about a user getting infected while visiting a website, and the second is about getting infected by e-mail via attachment....
0
votes
1answer
38 views

What kind of damage does the HummingBad Android malware do when it fails to gain root access?

There is this Android virus out there called HummingBad, and it seems the first thing it tries to do is try to get root access. There are so many device models out there, and the rooting process is ...
0
votes
0answers
27 views

How exactly does the HummingBad Android malware gain root access?

I've read a little bit in the last few days about HummingBad, an Android virus which tries to gain root access. It seems to use the root access to display ads and install apps. Varying estimates put ...
0
votes
1answer
49 views

Script injection on all browsers

I have something injecting a script into all web browsers that I have tried - Firefox, IE, Edge, Chrome - and it doesn't look like an extension (since it is doing so in different web browsers). I ...
3
votes
0answers
67 views

Is the iPhone vulnerable to the BadUSB malware?

Supposedly, the BadUSB malware can infect any USB device. But I find this hard to believe since I don't see why most USB devices would have reprogrammable firmware and I find it even harder to believe ...
0
votes
2answers
98 views

How does malware protect its own malicious code from being exposed?

For example, if a new rootkit starts spreading and reaches a malware honeypot, any skilled security specialist could get a memory dump of the system, find the malicious code and reverse engineer it, ...
0
votes
0answers
38 views

Any known malware that changes commits?

Recently I've been hit by a strange behaviour of SVNTortoise, maybe I got a malware? Are you aware of any SVN related malware that changes the actions done by team-mates? It's the second time it ...
2
votes
1answer
55 views

Could a computer turn itself on if the BIOS was modified even if it was turned off by holding the power button down?

My Thinkpad might have been hacked and I know this sounds a little far-fetched, but I suspect the BIOS might have also been hacked. Would turning it off by holding the power button for a few seconds ...
7
votes
3answers
149 views

Is malware distributed with pirated software actually common?

An often-repeated piece of conventional wisdom goes like the following. Don't download pirated software, they often contain malware. I'm curious to know if there are any hard facts to backup ...
0
votes
1answer
31 views

If a malware/virus can insert from clipboard to a webbrowser form, than can it insert key presses too?

Question: If a malware can insert from the clipboard a password to a webform in a webbrowser, than can it "in general" insert key presses too? Related to password fields, that disabled the clipboard ...
0
votes
1answer
67 views

Can't remove suspicious bridge connection

I'm currently fixing the computer of a family member who just fell for the "I'm from Microsoft and let me take control of your computer please" phone scam. The computer is an old Core 2 Duo running on ...
0
votes
1answer
59 views

How does the quarantine of anti-virus/malware software work? [duplicate]

What is the quarantine of antivirus software? Is it just some strict user/group rights and changing file extension or is it an actual moving the file(s) to a virtual environment? How is this software ...
1
vote
3answers
407 views

How can I kill minerd malware on an AWS EC2 instance? [duplicate]

I have an AWS EC2 instance running RHEL 7.2 which seems to have been hacked by a BitCoin CPU Miner. When I run ps -eo pcpu,args --sort=-%cpu | head, it shows that there is a CPU miner that's taking up ...
1
vote
1answer
75 views

Can you get a virus from sending a GET or POST request? [duplicate]

If I need to fix up my question in any way please let me know, this is my first question on the site So there's a game development website I use where you can develop with other people, and within ...
0
votes
1answer
59 views

Deobfuscating JavaScript Malware

Recently I was going over my network activity and came upon a PCAP that is directly related to a Trojan Dropper. Taking a quick look into the TCP stream of the packets, I found some malicious ...
0
votes
1answer
37 views

Are the Linux community/universe repositories significantly less safe then the main repositories?

If so what makes community/universe less safe? Is there less testing or is it simply less safe because more people could put malware in them.
1
vote
4answers
2k views

Are these “Urgent Firefox Update” popups bogus?

I've gotten, over the past couple of weeks, at least three screens popping up saying "Urgent Firefox Update". These are from URL https://eexowdlzyjx.net/. At least once they have been preceded by "...
0
votes
0answers
53 views

Why does Windows Explorer connect to some IP address? [duplicate]

I recently found that my Windows Explorer is connected to some IP address from Spain. As I know that Windows Explorer should not connect to the Internet, I installed an antivirus and firewall, which ...
0
votes
0answers
32 views

Dynamic Analysis - understanding processes and modules

Recently, I have been teaching myself Malware Analysis in my home lab environment. I am attempting to find the process tree for Malware so I can write end point signatures for them. However, I have ...
27
votes
1answer
3k views

Has malware ever been found in a package from a large Linux distribution and what is done to prevent this from occurring?

I am wondering exactly how safe are the Arch, Ubuntu, Mint and Manjaro repositories. What testing is done to ensure that a trusted user does not place a virus in a package, and how often?
0
votes
0answers
20 views

How to prevent cache-based side-channel attacks in IoT devices

The sharing of hardware resources from various vendors in the Internet of things is fundamental for efficient processing in the cloud. The presence of a myraid of clients accessing the same hardware ...
3
votes
0answers
61 views

How can an executable be this small in file size? [migrated]

I've been generating payloads on Metasploit and I've been experimenting with the different templetes and one of the templates you can have your payload as is exe-small. The type of payload I've been ...
0
votes
2answers
42 views

Attack vectors and payloads [closed]

I have a question about malware. Malware attacks a machine through an attack vector. When it infiltrates the machine, it "unleashes" the payload. Now, let's say that I am infected by a virus, which ...
1
vote
1answer
59 views

Security of a backup server

I am concerned about attacks of the crypto malware which encrypts all storage reachable (for a ransom payment you get the key to decrypt). I use only Linux (Debian) and have a separate ARM computer to ...
0
votes
1answer
56 views

Acquire new permission after installing an Android application

I would like to know if there is an attack that allows an installed Android application to acquire further permission that is not assigned initially during installation. I did some research and found ...
2
votes
2answers
52 views

What would it take to scan a PDF for questionable content in addition to malware?

My company is trying to implement a new feature on our site to let customers load documents accompanying an order. We know that we will need to perform some kind of malware scan by calling out to a ...
0
votes
0answers
42 views

How do malware save configuration of C&C-server?

Malware must communicate with a command and control server. In order to be able to do that the malware must know specific things about that server (e.g. hostname, port, username, password...). Of ...
0
votes
0answers
57 views

Trying to build an offline virus total type product

I have been tasked with finding a way to scan a file using multiple AV products. The machines this is to be used on cannot be connected to the web, due to lab restrictions and the AV products cannot ...
0
votes
0answers
71 views

A JSE file was downloaded after clicking a notification on my Facebook account [duplicate]

I got a notification on Facebook that says "Finn mentioned you in a comment". After clicking the notification a file was downloaded on my phone. I found it unusual because when you click a ...
0
votes
0answers
15 views

VM Introspection on Public IaaS clouds

I came across this Security SE post and a few papers on VM Introspection [1] [2] [3] What prevents cloud providers like AWS from using techniques like these to observe EC2 instance activity? If they ...
2
votes
0answers
13 views

Is it better to have a secure channel or secure PIN entry for Smartcards?

Assume I do own a computer, a USB-connected keyboard and a USB-connected contact-based (trusted) chipcard reader with a hardware pinpad. There are now two types of smartcards relevant to this ...
2
votes
2answers
177 views

What risks do I have now that I accidentaly opened a suspicious URL send to me by Skype?

The following URL was sent to me by a trusted Skype contact (from my university): WARNING - DO NOT CLICK IF YOU DON'T KNOW WHAT YOU'RE DOING http://bit.ly/28PPw3V#dahubas=my_skype_id I clicked on ...
-1
votes
1answer
36 views

Decompiling folders inside a jar file [closed]

I am in possession of a jar file that I have reason to believe has a RAT inside. I downloaded it inside of a virtual machine with jad installed and began to attempt to look at the source. I found that ...
3
votes
2answers
48 views

DGA (Domain Generation Algorithm) - malwares

Some malwares use DGA (Domain Generation Algorithm) to randomly generate domains in order for the zombies to be able to communicate in a resilient manner with the C&C. As far as I know, there is ...
2
votes
1answer
67 views

Virtual network for malware analysis

I'm attempting to do some analysis work on a malware sample but I'm running into a wall. I can't get the malware to execute correctly and talk to its C2 server. In my lab I have a Windows machine that ...
1
vote
1answer
59 views

Why do browsers not protect against scripts coming with images?

I understand that this is how it goes: Malformed Image --> Buffer Overrun --> Stack Over Flow --> Execute Malware Pushed On Stack And though I don't a huge amount about this, I know that I ...