Linked Questions

1 vote
2 answers
947 views

Abusing Shell Feature for Privilege Escalation

This was covered in Linux PrivEsc, task 15, in this TryHackMe room. I am having trouble understanding how this debugging mode is executing the commands in the PS4 variable, and why I must put /usr/...
questioner's user avatar
2 votes
1 answer
1k views

How to replace certain backup files on a website every 30 minutes? [closed]

I have a website built with WordPress, unfortunately somebody hacked it several times, deleted my adsense code and put his own adsense. I tried many security techniques, changed database name, did ...
Arnold Rothstein's user avatar
1 vote
1 answer
327 views

Is the SSH last login message reliable or rather something easy to get tampered with?

My client's Linux server recently got compromised by unknown means (highly likely because of a weak password). When I first logged into the compromised server I discovered the following: The Log ...
Sir Muffington's user avatar
0 votes
3 answers
194 views

phishing from chrome

This just showed up in Chrome. It's obviously phishing - the mangled English and weird url give it away. How would it work? Asking me for info I shouldn't give them? My system then slowed down. ...
Ethan Bolker's user avatar
19 votes
6 answers
30k views

How can I safely back-up files from an infected computer?

Imagine a laptop that's been infected by malware, and that the owner hasn't backed-up their files.* They have pictures, videos, and documents they'd like to preserve, so they're hesitant to ...
user avatar
1 vote
0 answers
68 views

Bought a used surface book online, any security precautions to take? [duplicate]

I have purchased a used surface book from Ebay, unpackaged and ran the device. The low price of the device lured me in despite my adverse attitude to used devices. Is there anything I need to perform ...
Gleb Pilipenko's user avatar
1 vote
3 answers
50k views

My computer was being remotely controlled by someone. Can find no viruses

Walking back to my computer (Windows 10), I noticed that my browser's history tab had just opened without me touching it and I thought I saw my cursor moving around. I had no control over my mouse ...
Vaidd's user avatar
  • 31
3 votes
4 answers
631 views

How to know if virus alert is false positive?

I received alerts (email & browser injection) from my ISP about a Zbot infection behind my modem. I ran Microsoft's malicious software removal tool, as well as AVG's Zbot remover on both my ...
Brack's user avatar
  • 455
1 vote
1 answer
331 views

Server infected with some kind of miner - can I steal the results?

A Windows server of ours got infected with some kind of mining tool. As luck (?) would have it, the tool left plenty of logs. The logs suggest it's a Claymore CryptoNote CPU Miner v3.5 Beta. Outside ...
MBender's user avatar
  • 380
170 votes
10 answers
42k views

Should I be concerned if the "FBI" has logged onto my Ubuntu VPS?

Yesterday, I was performing a bit of general maintenance on a VPS of mine, using the IPMI console my host provided. Upon setting up SSH keys again via the IPMI console, I logged in via SSH and was ...
lol what is this's user avatar
1 vote
2 answers
3k views

Is this Android malware?

I am randomly getting redirected to a page that looks very suspicious, especially the URL that sends the base64 encoded payload. It usually happens when I click a news link, usually a local news site. ...
rys's user avatar
  • 123
9 votes
4 answers
2k views

Can we trust the information displayed by the linux utility commands for a vulnerable machine?

After checking a vulnerable linux machine for rootkit and deleting them, we need to get some informations about the process , port ,incoming or outgoing connections... , using some useful commands as ...
GAD3R's user avatar
  • 2,231
4 votes
1 answer
208 views

Thorough computer scan

I'd like to give my computer an overall deep scan against all kinds of malware. I was infected about a year ago and I feel like there may still be some hidden rootkit on my HDD or something like that....
user104674's user avatar
0 votes
2 answers
1k views

How dangerous are worm:win32/Goldrv!rfn and worm:win32/vbjk?

Windows defender has detected the following worms on my system and I was wondering how dangerous are they and what is it that they do?
Django's user avatar
  • 35
4 votes
3 answers
1k views

Best way to check if your browser is secure

There is a lot of Malware checking software which seems is just a virus. How can you check for sure that your Windows 8 computer is uninfected with virus and malware? Is malwarebytes enough, or ...
magister's user avatar
  • 141

15 30 50 per page