Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [drive-by-download]

A drive by download is a download that occurs as a result of a user merely visiting a website or a download that seeks (and gets) a user's authorization to download but misrepresents what the file is actually going to do.

1
vote
3answers
194 views

Accidentally clicked a phishing link, am I at risk?

I clicked a link from a fake Twitch streamer and now I'm scared of being spied on. I typed my account details but didn't actually sent them because I realized it was a fake link right before clicking ...
0
votes
1answer
229 views

Why hasn't the one-click attack taken over the world?

This is a follow-up question related to Is single-click phishing possible?. If such a convenient attack is possible, I assume everyone on the internet should already be hacked. Why hasn't that ...
2
votes
2answers
845 views

Can visiting Pirate Bay itself give you malware? [duplicate]

So I have a MacBook running High Sierra latest version and I decided to go to the Pirate Bay search engine for the first time just for seeing how it looks and just some research. So I searched for ...
3
votes
2answers
173 views

Do malicious downloads bypass integrated browser downloader, if so how does that happen?

I've been reading a lot on here about malicious downloads from browsing sites, drive by downloads, etc, but never heard talk about how the download happens, and how it would bypass the internal ...
0
votes
2answers
173 views

Can a simple webpage link contain any virus or do harm to my system? [duplicate]

Is there any harm to be expected, if I just clicked on such a link described in this question?
3
votes
2answers
1k views

How does drive by downloads work, and what does a browser being “secure” actually mean?

In the last few days I have been researching all the types of viruses and also about the ways of infection. I have also read about the drive by method and my questions are: How is it still possible ...
3
votes
2answers
377 views

Disclosure of end user files or installation of Trojan horses via XSS

I've stumbled upon following examples of XSS attacks on OWASP: Other damaging attacks include the disclosure of end user files, installation of Trojan horse programs... As I know a classic XSS ...
92
votes
4answers
39k views

I was tricked on Facebook into downloading an obfuscated script

I got a notification on Facebook: "(a friend of mine) mentioned you in a comment". However, when I clicked it, Firefox tried to download the following file: comment_24016875.jse This is an ...
0
votes
1answer
406 views

Virus suspicion on website built with PHP Codeigniter [duplicate]

I have received a website, which uses Codeigniter, to modify. The problem is, sometimes when I refresh the main page, a strange file named "download" with the Windows icon will start to download. I'm ...
-2
votes
1answer
113 views

What to do after exposure to a drive-by infection?

I clicked on a link that pretty clearly offered exposure to a drive-by infection. I won't post the link itself, but I got it from a link which is inside a reddit link (obviously the reddit website ...
40
votes
7answers
18k views

Can cookies carry viruses?

I was wondering whether a cookie can carry a virus (or any security-threatening code). In some sense it is similar to a download. So by simply visiting a site, could I get harmed?
13
votes
2answers
1k views

Advertisement on Skype tried to download a file to my computer using Javascript

I usually have Skype running in the background. If you have ever used Skype before, you probably know it has advertisements. One of these advertisements made two windows pop up on my screen, asking to ...
240
votes
5answers
18k views

Is the save button delay in a Firefox download dialog a security feature? What does it protect?

When I click to download a file through Firefox, a dialog window appears asking me whether I want to save the file somewhere or open it immediately once downloaded. The OK button in the dialog window ...
3
votes
1answer
2k views

Why is Norton Safe Web flagging my site as dangerous when it reports on PHP files/urls that don't exist?

I'm in a bit of a quandary over Norton Safe Web's rating of my company's website. My question is: is it possible for someone to fool Norton Safe Web into thinking that our website has PHP files which ...
4
votes
2answers
682 views

Are malicious drive-by-downloads detectable based on file type/mime type?

Drive-by-downloads are automatic downloads without user interaction. We provide a free service for uploading large files and notifying users by email (this one, something like ge.tt or WeTransfer). ...
2
votes
2answers
356 views

Disabling downloads in the browser; are there any benefits?

I was playing around with the security settings in my browser (IE) after being attacked by malware. I noticed an option to disable downloads. If I were to disable downloads, and re-enable them when ...
1
vote
1answer
133 views

Demonstrating the risk of drive by downloads to the uninformed

I have come across many people who don't believe in antivirus solutions and don't patch or update their OS and applications. "I never visit dodgy websites", "I only use the internet to read emails" "I ...
-2
votes
1answer
694 views

Have java drive bys stopped working? [closed]

I don't hear or read about Java Drive Bys (DBD) these days. Up until last year we were always warned against java drive by threats. What happened? Have they become obsolete these days? Edit: To be ...
0
votes
3answers
162 views

Security concerns of downloading websites contents

I recently started using Firefox for Android and saw I can download pages as PDF and near every image or video for any site and I'm using that quite a lot so what is the risk of downloading such ...
0
votes
1answer
516 views

Drive By Download Without User Interaction? [duplicate]

Are there any kind of drive by download attacks (in Java maybe) that does not require any user interaction? When you make a drive by download in Java in general a popup appears to ask some permission ...
1
vote
2answers
221 views

What are the security threats when Googling and surfing when my Gmail account is open?

Suppose I log to my Gmail account. After that, I use Google to search for random websites and visit some. Are there any security threats on my Gmail account when Googling and surfing the net while it ...
1
vote
1answer
1k views

Is drive-by-download possible with NoScript?

I am using and getting my friends to use NoScript, and the argument I usually have to use to convince them is "It prevent website to infect you without you downloading something (by yourself)". But ...
1
vote
2answers
178 views

History of drive-by exploits [closed]

I am interested in drive-by download attacks. For the moment, the oldest article I found on internet treating about it is this one. Does someone know when first the expression drive-by download ...
0
votes
3answers
734 views

Drive-by downlad VS buffer and stack overflow attacks

Today malware is mainly spread thanks to vulnerabilities exploited in browsers and their plugins. The attackers use JavaScript to target those vulnerabilities. Two examples of such attacks are drive-...
1
vote
3answers
2k views

What are JS malware attack techniques?

Malicious JavaScript (generated by malicious hosted PHP code for example) can lead to attacks. What are the types of attack that malicious javascript could perform? Are the drive-by download attacks ...
1
vote
1answer
422 views

Questions about the 2013 php.net malware

On October 24th, 2013, the admins of the famous php.net website said that their website delivered malware to its visitors using a drive-by download attacK. I have several questions about this malware, ...
1
vote
1answer
126 views

Could running applets/videos trigger a drive-by download attack?

Let us visit a given webpage on which video files and/or java applets are embedded. Could clicking to start on these videos/applets lead to a drive-by download attack ?
26
votes
2answers
2k views

Is there a real possibility of getting malware by “drive-by”?

I know malware can be gotten by downloading and running stuff, but is there a real possibility of just viewing a webpage or clicking a link and getting one? Assuming using only Firefox / Chrome and ...