Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

learn more… | top users | synonyms (1)

4
votes
2answers
97 views

Notifying users of a possible security breach

Yesterday, a coworker informed me that a user had opened a malicious e-mail containing a .dotm document which she could not open. I undertook the usual steps to prevent the malware from spreading to ...
2
votes
2answers
421 views

Beside GIFAR are there any other known polyglot files? [closed]

A GIFAR file is a polyglot file with a fancy name. It can be "opened" both as a valid GIF file and a valid JAR file thus leading to security issues under certain circumstances. Definition of a GIFAR ...
1
vote
1answer
47 views

Retrieving malware report information from malware network

I'm getting ready to stand up an isolated malware network at the place I work for performing analysis tasks and it will have a suite of reverse-engineering and analysis tools on it. For obvious ...
0
votes
1answer
149 views

Is that possible for Linux and windows machines to be infected with KeRanger ransomware?

According to theguardian The Transmission site offers the open source software that was infected with the ransomware called KeRanger malware, it's programmed to encrypt files on an infected personal ...
1
vote
2answers
145 views

Money stolen via Android malware Port 4000 remote anything exploit

As background, my business bank account was compromised. The compromise also involved call forwarding of a smartphone. So they got bank credentials and cell phone credentials. I initially suspected ...
0
votes
3answers
113 views

What implications does the KeRanger infection have for Mac OSX security?

Recently some hackers replaced installers for a popular torrent client with an infected version. According to paloaltonetworks, they have no idea how the hackers managed to do this (let's just assume ...
0
votes
1answer
63 views

Spoofing domains in Facebook

Over this past week my Facebook's timeline have been flooded by people posting "teenagers sex videos" and tagging a lot of people. It's common in Facebook to see this kind of malware spreading to ...
3
votes
1answer
199 views

How are viruses attached to files?

How do viruses attach to files? How does it infect applications? I'm talking about down to the binary level, how does code get added to a file to make it infected? Obviously, if we hash check the ...
0
votes
2answers
51 views

chrome invisible flash document

I have it so flash doesn't start on page load for security and performance. Lately I have been noticing That some pages will load with a flash document that takes up the full screen. I can see it as ...
0
votes
1answer
96 views

Recent malware programming language? [closed]

I'm working on pentesting as part of Information Security course. Recently I have been in some Education Oriented Malware... But I have only developed in .NET oriented applications. How is malware ...
3
votes
1answer
82 views

Why browser hijacker changes the homepage to yahoo [closed]

I have seen many browser hijacker like istartsurf, ask.com which changes the victim's search engine to yahoo. Why many(almost all) browser hijacker changes the search engines to yahoo. Is there any ...
3
votes
3answers
156 views

What kind of email attack is this?

I received the following invoice_scan_nHl8GB.js as an email attachment from a spoofed email address/infected PC zipped in a E.zip. Strangely the sender's address is not properly spoofed, probably ...
3
votes
5answers
2k views

How can I know if my PC is getting infected?

I have installed an antivirus, but as no antivirus is perfect, what can I do to diagnose if my PC is getting infected? For example, keeping a close eye on what programs and tasks run when I turn my ...
12
votes
5answers
2k views

Unknown process on my ubuntu machine communicating over multiple ports with UDP proto

I have a Django web application where the web app and the postgresql database are hosted on two separate Ubuntu-based machines. On my Database machine (and not my web application), if I run sudo ...
0
votes
1answer
40 views

How Do AVs differentiate between normal cryptographic modules and viruses crypters

I have read that some viruses -in order to avoid AVs- use crypters to encrypt their code so that the AV can't detect them. so as a countermeasure, AVs are programmed to look for the crypter -in the ...
1
vote
0answers
72 views

What are the appropriate steps to take after installing a questionable Android app?

Situation: User installed an Android app from the Google Play Store. User's device is rooted, but that app does not have root privileges. XPrivacy reveals that the app is trying to make IPC ...
2
votes
2answers
308 views

Automatic redirection to another website

As soon as I open a webpage, I am redirected to another site. I have an antivirus on my PC, but it has not been able to do anything to stop this. I have reseted my browser settings (Chrome) and ...
2
votes
3answers
469 views

Unauthorized remote control performed today - teamviewer?

I came home a bit ago from an overnight trip and saw my PC screen moving around. I hoped it was just some ad animation but as I sat down I realized someone was opening 30+ tabs in my Chrome to an ...
1
vote
3answers
116 views

Signatures for an antivirus

When anti-virus software compares an MD5 signature for malware, does it execute the malware on my computer in order to generate the appropriate signature to compare against? [ORIGINAL QUESTION] MD5 ...
16
votes
3answers
5k views

Running windows in virtual machine, should I bother with security?

I'm running Windows in a virtual machine on my mac (via Parallels). Should I bother installing antivirus, firewall and using other conventional wisdom practices (like don't open unknown .exe etc)? I ...
0
votes
1answer
105 views

Is installing malicious add-ons via drive-by attacks the only way to add new toolbars to browsers?

Some attacks on web browsers consist in installing new toolbars on the browser of the user (which is just a small aspect of browser-hijacking. My question: is installing (malicious) add-ons (via ...
27
votes
4answers
59k views

How to inject executable, malicious code into PDF, JPEG, MP3, etc.?

I wanted to know if its generally possible to inject executable code into files like PDFs or JPEGs etc., or must there be some kind of security hole in the application? And if so, how would one do ...
1
vote
1answer
192 views

How to protect against the new malware Mazar Bot?

Mazar Bot is new Android malware that spreads via SMS. Its capabilities: It can read incoming SMS and send itself, make calls to directory contacts, contaminate Chrome, access to the Network, read the ...
0
votes
1answer
71 views

Why would a hacker/thief just use my credit card for Apple in-app purchase? [closed]

I talked with Apple and finally I found out it was my credit card information got stolen instead of my Apple account. I looked at all my transactions and hacker/thief only made few Apple in-app ...
0
votes
1answer
97 views

Is this behavior the result of malware?

I have setup a new set of servers to test a software in Amazon EC2, and had set up my application. I've given it public access and a DNS entry, so its easily reachable by those that need to test it ...
2
votes
2answers
2k views

Why does Google Safe Browsing keep detecting malware on my website?

We provide a freemium service to upload large files and download them later on. Using ClamAV, we scan every file for viruses after it is uploaded and before it can be downloaded. The file is deleted ...
0
votes
2answers
111 views

Bad USB malware and Chrome OS

I have recently been reading about the unpatchable BadUSB and similar malware. I use Chrome OS, which is supposed to be very secure, but could someone with physical access to my system compromise it ...
81
votes
4answers
7k views

What is the risk of copy and pasting Linux commands from a website? How can some commands be invisible? [duplicate]

Like all beginners in the land of Linux, I usually look for websites that contain some useful shell commands, mark it with my mouse, copy it (CTRL + C) and paste it into a terminal. For example, if ...
-3
votes
1answer
70 views

How many viruses has the average computer? [closed]

Malware hides, so you cannot expect your computer to be malware-free, even when you have antivirus. My computer works fine, but I am fairly sure that I might have something lurking in there. Rootkits ...
2
votes
1answer
60 views

How to prevent IoT devices from phoning home via the neighbor's wifi?

I'm wondering what, if anything, can be done to thwart the sort of attack described below. First, you can assume the following: (1) There are several devices in your home which you have deliberately ...
1
vote
1answer
90 views

Benefits of injecting antivirus inside browser

Some antiviruses propose you to use their browser plug-ins. For instance, Avast SafeZone propose you reactive defend by checking signatures of keylogers/malware/spyware etc. But, what's the benefit ...
6
votes
1answer
77 views

Are Push 2FA methods safe from Android and iOS Malware?

I am doing a survey on various 2FA solutions, and recently I came across “Push” 2FA (e.g Duo Security). In this solution, the site (e.g. a banking site) pushes a notification to the user’s mobile ...
1
vote
2answers
168 views

SafeZone: keyloggers/malware/spyware protection

As part of Avast free updates you have a chance to use SafeZone browser. Among features of SafeZone browser I found that SafeZone protects you from keyloggers/malware/spyware. I'm interesting ...
10
votes
1answer
1k views

unauthorized logging into my computer

I ve been suspecting someone logging into my computer because a couple of times, during the user log on screen I saw "Signed in remotely from.." The first timeIi saw some of my pictures copied on ...
42
votes
5answers
10k views

Is it dangerous to call spam phone numbers, even if you know they're spammers?

I sometimes like to check spam just to see how the messages look like, and I found someone who actually put an American phone number (1-XXX-XXX-XXXX). Most of these spammers are either trying to get ...
30
votes
6answers
4k views

How safe are employee laptops in China against International corporate espionage?

I recently took a business trip to China. Our IT department told me I could not take my normal machine, and instead gave me a loaner. This loaner had MS Outlook and was linked to my normal company ...
0
votes
1answer
84 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
4
votes
4answers
107 views

What makes Malware so difficult to remove?

Why is it that when malware or adware is installed it's extremely difficult to remove? You can't go into your programs list to uninstall it and usually need a special program to remove it. What do the ...
1
vote
4answers
151 views

Do technical advice sites sometimes link to malware, and if so, how should we properly research errors? [closed]

Suppose you get an error on your PC that shows up randomly, then you do a search on the internet for the error to find out how to fix it. Typically, you will get some sites that offer a solution, but ...
2
votes
2answers
17k views

How does Remote Access Trojan / Backdoor Software work?

How does a RAT works? I understand it as once we visit the infected website, the browser might download the Trojan to our PC automatically. Will it be executed and auto-installed in our computer? I ...
6
votes
1answer
295 views

Should veil framework produce packed and obfuscated binaries which bypass virustotal?

I have been working with the veil framework to test an internal IDS system I have in place. I have used a public malware sample which produces an 8/53 hit score on Virustotal and run it through the ...
1
vote
1answer
53 views

Ad-Banner Rendering Sites Serve with malicious content - how to respond?

We've received a random email, which was of-course by the way it looks might be a marketing attempt - however, one always needs for a verification to be done. The email read the following: We ...
1
vote
4answers
409 views

iPad infected with virus (popup - admobinew.com)

This morning I was reading some news on some websites (I think one of them was haaretz.com) using my iPad (ios 9.0.1), I clicked on a news and I was redirected to some dodgy website and I started ...
1
vote
1answer
40 views

Router Malware Infection [closed]

I am aware that routers can be infected by malware and I have two questions. Can a router be infected with malware through the USB port. Are routers only susceptible to DNS malware such that you ...
1
vote
4answers
12k views

“Virus Found” Web Browser Pop-up

I use a website that typically creates a new tab with an ad on the first click. Usually, I can close the tab without even looking at it, but recently a more aggressive strain brings up a pop-up (for ...
27
votes
3answers
1k views

Are .dll files normally found in system32 but now in a user’s AppData folder always suspicious?

I recently had to read over some malware reports and associated logs for a confirmed malware detection and subsequent infection of a Windows asset. The logs clearly show .dll files in a user’s AppData ...
5
votes
2answers
149 views

Security of Windows Processes using “RunAs A Different User”

I've struggled to find much information on this topic. What I'm interested in is the following: Scenario A user is logged into a Windows (7, 8.1, etc) workstation as a standard non-administrative ...
5
votes
1answer
102 views

Does prefetching/preloading in web browsers pose a security risk?

Today I googled the name of a domain that was reportedly serving up malware. My search results came up (with the compromised domain at the top of the list) and within seconds my AV gave an alert ...
0
votes
3answers
1k views

Is mgicinjs.info a virus or malware site? How to get rid of it?

Today, I noticed that almost all of my web project (published or in localhost) have a set of weird script references in their pages: And they are all automatically generated - they don't appear in ...
0
votes
2answers
82 views

How dangerous are worm:win32/Goldrv!rfn and worm:win32/vbjk?

Windows defender has detected the following worms on my system and I was wondering how dangerous are they and what is it that they do?