Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

2
votes
0answers
15 views

Can Restarting An Infected Computer Make It Worse?

I seem to remember that rebooting a potentially infected Windows PC before removing the malware may allow it to take advantage of early boot up states that may be vulnerable if the security measures ...
7
votes
3answers
162 views

Is malware distributed with pirated software actually common?

An often-repeated piece of conventional wisdom goes like the following. Don't download pirated software, they often contain malware. I'm curious to know if there are any hard facts to backup ...
0
votes
1answer
37 views

during change of IP address - adware infection

I have a puzzling situation. I have build a small site for a friend which I am hosting together with other site I have. His domain is registered with a certain company which is also an ISP provider. ...
1
vote
1answer
47 views

What is the lifespan of a C2?

I've been working on setting up dynamic blacklists, and one question that came up is how long typical entries should be kept on a blacklist. In the interest of equity, there should obviously be some ...
7
votes
1answer
436 views

Chrome/ Opera: How to trace and single out this Malware in Browser Extensions? caused by Tab Manager

There have been lot of articles about legitimate chrome/ opera extensions that get sold out to malicious parties that end up pushing the wrong kind of code down the pipe, since by default these ...
1
vote
1answer
80 views

Bizarre HTTP requests to VPS, former malware command and control server?

I just bought a new VPS with Linode. I installed Apache and noticed some very strange behavior that I have been seeing consistently throughout the logs. So basically, I keep receiving stranger HTTP ...
2
votes
2answers
113 views

How to prevent IoT devices from phoning home via the neighbor's wifi?

I'm wondering what, if anything, can be done to thwart the sort of attack described below. First, you can assume the following: (1) There are several devices in your home which you have deliberately ...
25
votes
2answers
24k views

Site preventing user from closing tab/closing browser

I've come across the following website hxxp://politie.nl.id169787298-7128265115.e2418.com/ [Possible malware] Whenever I open it in Firefox it prevents me from closing it, I can't even close the ...
-1
votes
2answers
77 views

What are the odds of someone modifying binaries downloaded over HTTP?

I recently read that most software available on the Web isn't sent over HTTPS (even if the link is on an HTTPS page). This means that the binaries downloaded were never authenticated and could in ...
0
votes
1answer
55 views

Google Chrome is redirecting before visiting a shopping website

I notice every few days (~5 days) that when I try to open an Amazon.in URL, before opening that URL, Chrome opens a different link which looks like an affiliate link. This link redirects to the actual ...
-1
votes
0answers
31 views

Malware from TPB(piratebay) infected my pc. I need to transfer my data into external hdd before wiping my hard drive [migrated]

OS: Windows (Primary), Ubuntu (secondary). Few days back I was using TPB(piratebay) obviously for educational purposes,even though I have ad-blocker at the time of browsing some advertisement did pop-...
1
vote
4answers
2k views

Are these “Urgent Firefox Update” popups bogus?

I've gotten, over the past couple of weeks, at least three screens popping up saying "Urgent Firefox Update". These are from URL https://eexowdlzyjx.net/. At least once they have been preceded by "...
12
votes
3answers
2k views

Would a (password + combination of images) be stronger for user's login regarding keyloggers?

The scenario: We have a login system for a web application that requires a plaintext password and 3 images (from a collection of images that the users select during registration, the images are ...
3
votes
2answers
122 views

What is the meaning of this possible malware?

My hosting service was helping me to identify a problem, and we found the following possible malware (which, of course, we have removed). Unfortunately, I'm not terribly technical, and so I am ...
2
votes
2answers
182 views

What risks do I have now that I accidentaly opened a suspicious URL send to me by Skype?

The following URL was sent to me by a trusted Skype contact (from my university): WARNING - DO NOT CLICK IF YOU DON'T KNOW WHAT YOU'RE DOING http://bit.ly/28PPw3V#dahubas=my_skype_id I clicked on ...
0
votes
0answers
32 views

How does quarantine feature work internally in antivirus? [duplicate]

I'm struggling to find out the internal encryption and details of quarantined file. if any body knows the information please share.
0
votes
0answers
40 views

I may have been compromised, now what?

How to trace and single out this Malware in Browser Extensions? Chrome/ Opera? I had installed the extension mentioned in the thread above. It contained Malware the redirected Java functions mainly. ...
0
votes
2answers
98 views

How does malware protect its own malicious code from being exposed?

For example, if a new rootkit starts spreading and reaches a malware honeypot, any skilled security specialist could get a memory dump of the system, find the malicious code and reverse engineer it, ...
0
votes
0answers
17 views

Risk from browser add-ons?, from external sources [duplicate]

Can a user agent switcher read my passwords? what if it is not mallicious but weak, could it be a faultline for others to hack me?
0
votes
1answer
37 views

Are the Linux community/universe repositories significantly less safe then the main repositories?

If so what makes community/universe less safe? Is there less testing or is it simply less safe because more people could put malware in them.
1
vote
2answers
69 views

How does a malware overcomes this facility

I've seen many viruses/malicious VB scripts get executed when accidentally double clicked or through fake shortcuts redirecting to some viruses causing the Victim's PC a serious damage. But nowadays ...
0
votes
2answers
40 views

Does a malware in an android phone have permission to read/modify/delete data of all the apps?

If an android phone is infected with malware/virus, can it access all the apps with modify/delete/read permission? Isn't there any control by an app , say a bank app which can't allow to read data by ...
0
votes
1answer
56 views

Analyze attack as an outsider

Today I visited my favorite news outlet using Firefox on my Android and suddenly I got malicious .apk file downloaded to my phone. Of course, I immediately reported the incident to the site owner. ...
0
votes
1answer
42 views

Yahoo for Chrome redirect? [closed]

I was on my computer, and when I opened chrome it goes to my email (I set it to my homepage), but sometimes it would take make a new tab and take me to a different site which was obviously looked very ...
0
votes
1answer
50 views

How to deal with possibility of viruses on Dropbox, Google Drive, external hard drive, etc?

For home use, what is the best way to deal with viruses that could be on external storage, which seems like a great way for hackers to persist on your system even after a reformat. Maybe the best ...
0
votes
2answers
539 views

How exactly does this Flash malware function on Ubuntu?

In this video, an experienced Ubuntu user manages to infect his system with some sort of malware. This is the first example I've ever seen of truly successful malware in the wild aside from privilege ...
1
vote
1answer
53 views

Shared folders in Windows to/from unsecured PC on the same network

I have a Windows 10 desktop computer which is my main device. It's password-protected and I'm not concerned about it being physically accessed by bad actors. I have a Windows 7 laptop with a fresh OS ...
0
votes
1answer
59 views

How does malware downloaded by JavaScript get executed, and why would you distribute malware in a .js file?

I have two questions about JavaScript as an infection vector. The first one is about a user getting infected while visiting a website, and the second is about getting infected by e-mail via attachment....
2
votes
1answer
883 views

HTML iframe security exploit

Can somebody explain if there's something malicious in this HTML, The width and height of the iframe ares set to 1 and it's out of the view with top: -100px; statement. I believe it takes some some ...
0
votes
1answer
39 views

What kind of damage does the HummingBad Android malware do when it fails to gain root access?

There is this Android virus out there called HummingBad, and it seems the first thing it tries to do is try to get root access. There are so many device models out there, and the rooting process is ...
4
votes
3answers
320 views

Which security measures does PyPI and similar third-party software repositories take?

PyPI is a third-party software repository for Python packages. Everybody can upload packages to it (see The Python Package Index (PyPI)). How does PyPI prevent people from uploading malware? When I ...
0
votes
0answers
31 views

How exactly does the HummingBad Android malware gain root access?

I've read a little bit in the last few days about HummingBad, an Android virus which tries to gain root access. It seems to use the root access to display ads and install apps. Varying estimates put ...
0
votes
1answer
49 views

Script injection on all browsers

I have something injecting a script into all web browsers that I have tried - Firefox, IE, Edge, Chrome - and it doesn't look like an extension (since it is doing so in different web browsers). I ...
3
votes
0answers
67 views

Is the iPhone vulnerable to the BadUSB malware?

Supposedly, the BadUSB malware can infect any USB device. But I find this hard to believe since I don't see why most USB devices would have reprogrammable firmware and I find it even harder to believe ...
2
votes
1answer
55 views

Could a computer turn itself on if the BIOS was modified even if it was turned off by holding the power button down?

My Thinkpad might have been hacked and I know this sounds a little far-fetched, but I suspect the BIOS might have also been hacked. Would turning it off by holding the power button for a few seconds ...
0
votes
1answer
31 views

If a malware/virus can insert from clipboard to a webbrowser form, than can it insert key presses too?

Question: If a malware can insert from the clipboard a password to a webform in a webbrowser, than can it "in general" insert key presses too? Related to password fields, that disabled the clipboard ...
0
votes
0answers
38 views

Any known malware that changes commits?

Recently I've been hit by a strange behaviour of SVNTortoise, maybe I got a malware? Are you aware of any SVN related malware that changes the actions done by team-mates? It's the second time it ...
0
votes
1answer
67 views

Can't remove suspicious bridge connection

I'm currently fixing the computer of a family member who just fell for the "I'm from Microsoft and let me take control of your computer please" phone scam. The computer is an old Core 2 Duo running on ...
1
vote
2answers
5k views

CloudFlare - prompted for “attention required”

I am getting a CloudFlare - attention required / security check prompt on most of the sites I visit through my Macbook running OS X Yosemite, these sites work perfectly on other devices (such as iPad, ...
0
votes
1answer
59 views

How does the quarantine of anti-virus/malware software work? [duplicate]

What is the quarantine of antivirus software? Is it just some strict user/group rights and changing file extension or is it an actual moving the file(s) to a virtual environment? How is this software ...
1
vote
3answers
450 views

How can I kill minerd malware on an AWS EC2 instance? [duplicate]

I have an AWS EC2 instance running RHEL 7.2 which seems to have been hacked by a BitCoin CPU Miner. When I run ps -eo pcpu,args --sort=-%cpu | head, it shows that there is a CPU miner that's taking up ...
4
votes
2answers
408 views

Why Antivirus Detects Simple Java Program as Trojan?

Just now I was testing a very simple code in Java when I noticed a strange thing. On compiling the program my antivirus detected it as trojan and deleted the jar file. Further it is not allowing me ...
1
vote
1answer
77 views

Can you get a virus from sending a GET or POST request? [duplicate]

If I need to fix up my question in any way please let me know, this is my first question on the site So there's a game development website I use where you can develop with other people, and within ...
0
votes
1answer
59 views

Deobfuscating JavaScript Malware

Recently I was going over my network activity and came upon a PCAP that is directly related to a Trojan Dropper. Taking a quick look into the TCP stream of the packets, I found some malicious ...
35
votes
4answers
27k views

Does a Virtual Machine stop malware from doing harm?

I would like to know if it is save for the host system of a virtual machine (VM - VirtualBox OSE in my case) to execute malware. Can a virus break out and read or write data from the host system? ...
27
votes
1answer
3k views

Has malware ever been found in a package from a large Linux distribution and what is done to prevent this from occurring?

I am wondering exactly how safe are the Arch, Ubuntu, Mint and Manjaro repositories. What testing is done to ensure that a trusted user does not place a virus in a package, and how often?
0
votes
0answers
53 views

Why does Windows Explorer connect to some IP address? [duplicate]

I recently found that my Windows Explorer is connected to some IP address from Spain. As I know that Windows Explorer should not connect to the Internet, I installed an antivirus and firewall, which ...
18
votes
3answers
1k views

How can a font be used for privilege escalation?

Recently Kaspersky released an analysis of Duqu 2.0 and apparently the malware used a True Type Font File to exploit a critical vulnerability (CVE-2011-3402) to "jump directly into Kernel". I haven't ...
0
votes
0answers
32 views

Dynamic Analysis - understanding processes and modules

Recently, I have been teaching myself Malware Analysis in my home lab environment. I am attempting to find the process tree for Malware so I can write end point signatures for them. However, I have ...
3
votes
2answers
110 views

How To Remove Possible Virus Files

See the original question. Using both AutoRun, where I disabled anything that wasn't verified or highlighted (that seemed suspicious), I looked at Process Explorer and found the above unverified. In ...