New answers tagged

6

This is a useless question but still interesting one :) and that is not audio jack He is a security freak like me, not real freak but there are some people who really care for their device security and of course a CEO will have some serious data inside his laptop, I am sure you understand that covering mic and cam is so that even an un-authorised access ...


16

From what it looks like, a malicious actor leverage what is known as a XML External Entity vulnerability (XXE) and then a Server-Side Request Forgery (SSRF). Facebook's servers were tricked into linking a malicious XML file from another domain, processing it and served it up to you. Here is the XXE cheat sheet and SSRF bible's cheat sheet, if you're ...


95

This is a typical obfuscated JavaScript malware which targets the Windows Script Host to download the rest of the payload. In this case, it downloads what appears to be mainly a Chrome Extension (manifest.json and bg.js), the autoit Windows executable, and some autoit scripts which install them. All of these files are named with .jpg extensions on the (...


31

I haven't got the time to fully reverse-engineer what this script does, but it seems to link to several .jpg files that are actually not images but text, and then references some .au3 files, suggesting that it actually saves those .jpg files under that extension. Those .au3 files seem to match AutoIt's file extension and indeed they look like valid AutoIt ...


11

Is this an exploit on Facebook? Most likely. The unscrupulous are always trying to find ways to gain access to bank accounts, passwords, friend lists, and anything else they can do to turn a buck. Is it possible that my friend got a virus which targets their contacts by tagging them on malicious links? There's no reason to think otherwise. The ...


0

Usually Facebook tries to detect the browser default language and if that is not available, based on IP or network usage Facebook sets the default locale cookie to the most used language around your area. In your case I am guessing Facebook is unable to detect the default language. Set a cookie locale=en_US and it should work! Update: I know this usually ...


4

Normally, facebook will not email you directly even in the event of a hack. What has most likely occurred, is someone obtained your facebook account primary email, which is easy for a determined attacker, then created a fake email (they could use hyperlink forging websites to make a link such as "security.facebook@facebook.com" or something similar) then ...


3

Attackers are not interested in her, but rather those associated with her. It could be YOU that is the target, and she is solely being used to get to you. This is how impersonation works on the social engineering level. When I perform social engineering during penetration testing, I impersonate someone with the most solid connections to my target. For ...


1

One of the points of social media login is to avoid password entry by resuing your existing loggged-in state with the social media. If you have not already logged in to the social media site in your browser, simply do that over mobile connection and then connect to this wifi. Some social media may want to verify your password before you can approve an ...


0

WPA protects against casually plucking your data out of the air on the way to the Wi-Fi router. It has nothing to do with the end-to-end security that Facebook and Twitter uses (HTTPS). Also, logging in this way does not grant them the ability to directly observe your username or password. All they get is a unique token that identifies your account, plus ...


0

You can't figure out his IP because you don't "interact" with your chatpartner directly (P2P). You send a message to facebook and there webserver sents it to your partner. So only facebook (and presumably the nsa) knows the IP of your opposite. It's very unlikly that they hand it out to you. Maybe by court order, so good luck.


2

Facebook isn't a desktop application which stores log files on your computer like Skype would, but rather a web server application which has its own log files no one can have access to without getting in the web server. The only two things you could possibly do are: (Legal) File a complaint to the police, if it's a legal matter, for them to ask Facebook ...


0

As noted in other answers there is a possibility to intercept the network traffic. It has been well covered in other answers so I won't bother diving into it again. However it is not as simple as capturing the packets and data. You can't encode network packets into video. So at this point you are looking at modifying their video messaging client to take the ...


2

If it is your personal WiFi (Verizon jetpack) and you are running WPA2 from your tablet to your Jetpack ... while it is possible for them to run a WiFi sniffer and/or a MitM proxy ... it is very unlikely. Like coffeethulhu said SSL/TLS can be can be intercepted and decrypted IF your company controls the network access you are using for your chat (its ...


1

Depends on the level of packet capture they are doing. If they are doing full packet capture with ssl/tls interception then yes. You don't have to be the NSA to do this kind of interception but it is not something that most businesses will want to pay for.



Top 50 recent answers are included