Questions tagged [malware]
Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.
2,509
questions
0
votes
0
answers
19
views
I clicked on a suspect link, whose base url was live (dot) tvstreaming4k (dot) com, during a live event. Is this a threat?
During a live event on LinkedIn, I erroneously clicked on a link in the chat, whose base url was live (dot) tvstreaming4k (dot) com and that I consider suspect. This led to a "This site can’t be ...
- 101
0
votes
0
answers
49
views
Secure boot disabled for Potential BIOS compromise on Tails OS machine
I have an ASUS computer that I use strictly for booting Tails OS from a USB. A few weeks ago I went into the BIOS and noticed that secure boot was disabled.
This computer has secure boot enabled by ...
1
vote
2
answers
516
views
Checking system integrity after clicking scam email link on Linux
Earlier today, my mother opened an email thinking it was from my sister-inlaw, then clicked on the shortened link.
The link loaded a page of fairly nonsensical text. The source of the page had no ...
CommunityBot
- 1
2
votes
1
answer
58
views
Anything I can do to combat malicious domains?
On Facebook, malware is currently trying to spread itself using the domain googlediver (dot) com, one sample of a malicious url is https://googlediver (dot) com/list-of-traveling-staff , and I believe ...
- 71
4
votes
2
answers
741
views
Malware techiques via Linux Chrome and its effects, non-root
Is it possible to visit a website with Chrome on Ubuntu and have that site execute shell code on my machine without explicitly downloading anything nor click on some Chrome execute question/popup? If ...
CommunityBot
- 1
2
votes
2
answers
353
views
If a computer gets infected with malware, can the host firewall block the malware from communicating back to its controller on the internet?
I'm trying to figure out how secure a host firewall is, hence the question in the title.
I read that many firewalls allow outbound connections to port 80 to allow browsing, would that be enough for ...
CommunityBot
- 1
-1
votes
0
answers
40
views
Looking for tips on hiring malware consultant - suspected repeated android compromise [closed]
I very strongly suspect that my devices (phones, but possibly also home pcs and work network) have been hacked repeatedly by the same person. I am trying to hire a consultant that can help me look for ...
- 1
2
votes
3
answers
494
views
Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?
Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?
If not then is there any way to visit a malicious ...
CommunityBot
- 1
4
votes
3
answers
9k
views
Pirate Bay Search Appearing in Chrome
While googling some errors today I noticed I had the option to use
the pirate bay search
Now I saw a similar question posted here How did piratebay.se search engine get in Chrome as an “other search ...
1
vote
2
answers
1k
views
Unauthorized remote control performed today - teamviewer?
I came home a bit ago from an overnight trip and saw my PC screen moving around. I hoped it was just some ad animation but as I sat down I realized someone was opening 30+ tabs in my Chrome to an ...
1
vote
1
answer
41
views
How serious are npm module vulnerabilities?
Obviously any known vulnerabilities are not great, but I'm curious how much I should be concerned about them.
I've seen plenty of articles that talk about the rise in malware/spam in npm packages:
...
- 198k
0
votes
0
answers
71
views
Use a virtual machine to do risky stuff. How to stay as safe as possible? [duplicate]
I have a PC with Ubuntu and Windows in dual boot. I use this PC for basic stuff: Windows for gaming, shopping and common browsing, Ubuntu to do something such as home banking.
I was thinking to create ...
3
votes
1
answer
538
views
Kinsing Malware entering via compromised Dockerhub Images?
I got a server infected with the Kinsing malware, which mines crypto on your server, maxing out your CPUs.
The malware initially creates the files /tmp/kdevtmpfs and /tmp/kinsing If you delete these ...
CommunityBot
- 1
0
votes
1
answer
275
views
Preventing Windows from seeing/tampering with linux drive
Is there a way to prevent a Windows 10/11 system to access/modify/delete data from a secondary linux drive?
I understand I can encrypt the linux drive, but wouldn't the windows system be still able to ...
CommunityBot
- 1
0
votes
0
answers
52
views
How to Safely Research a Suspected Malicious Website by Using A VM [duplicate]
I am aware of a website that I suspect is, at the very least, pulling user data from visitors and possibly performing other malicious activity on visitors. Of course, the safest course of action is to ...
- 128k
0
votes
1
answer
1k
views
Can a Logitech wireless headphone usb receiver be infected?
Can USB dongles/wireless receivers get a virus from a computer that has been infected? I imagine it’s no more vulnerable than say a usb mouse is?
But since these Logitech usb devices like your mouse ...
CommunityBot
- 1
3
votes
1
answer
2k
views
Potential router malware? Receiving "Access Denied" and other weird blocks from various websites
So I've been having some weird browsing behavior over the last few weeks and it's gotten a lot worse the last few days. I've been getting blocked/banned by various websites off and on. Here are a few ...
CommunityBot
- 1
2
votes
1
answer
324
views
In the modern context, what max harm can a webpage do, if the creator is malignant? [duplicate]
Note: this does not answer my question as it mentions Java/Flash(not in the modern context. The question is from like 10 years ago so probably outdated), and mentions weakness introduced by the user(...
- 128k
2
votes
2
answers
2k
views
Bypassing Windows Defender VBA custom code
I've recently written a simple keylogger using classic DLL-injection technique. I wanted to simulate a real phishing attack where the user opens an Office document with macros and by enabling them he ...
CommunityBot
- 1
1
vote
0
answers
66
views
Detecting hard to detect stalkerware - a theoretical question
Suppose you have a stalker and this person has access to professional advice.
Suppose your Android phone was hacked by means of physical access, i.e. known unlock pattern or stolen password note, with ...
- 128k
4
votes
1
answer
176
views
Suspicious indexing of non-existent pages
Just recently, the Google search engine started indexing my site with a crazy number of requests. When I logged into the console, 600,000 pages were indexed, and 919,000 more were not indexed. For ...
- 198k
0
votes
1
answer
71
views
Cleansing a personal laptop to use for business
I am going to be setting up an online business that will expose high-value data, i.e. trade secrets, IP, merchant/e-commerce accounts, etc.
The computer has been used before for looking at porn, etc. ...
- 22.8k
0
votes
1
answer
296
views
Rogue login to Google account after Windows clean install
Yesterday I downloaded a sketchy .exe on my Windows desktop and executed it. A command prompt window appeared then nothing abnormal happened. I tried running MalwareBytes but it didn't display any ...
CommunityBot
- 1
1
vote
1
answer
245
views
Polymorphic Analysis
I'm a beginner at malware analysis. For my research studies, I have to identify polymorphic malware based from experiments. I would like to know if there are any guides showing how to analyze the code ...
CommunityBot
- 1
27
votes
4
answers
30k
views
Is a safelinks.protection.outlook.com link phishing?
Received an email which contain the below hyperlink
https://nam02.safelinks.protection.outlook.com/?url=http*3A*2F*2Factuallysale.com*2F&data=02*7C01*7C*7C548d20ace3ec4747fe1008d7d7d8b597*...
- 18.7k
1
vote
1
answer
332
views
Is persistence via scheduled tasks possible if the user is not elevated?
As far as I can tell, scheduled tasks may only be created by those in the Administrators group by default. Does that mean that persistence can't be achieved via this method without gaining elevated ...
CommunityBot
- 1
0
votes
0
answers
64
views
How can I know whether I'm infected by StripedFly malware?
I was reading this article, and decided to search for sd-pam in the processes of one of my laptops.
I did ps -x | grep -i "sd-pam", and got
2864 ? S 0:00 (sd-pam)
29172 pts/0 ...
0
votes
0
answers
49
views
help in understanding hybrid analysis results? Mac
So I have a few PDFs on my computer I got online a few years ago on my Mac computer.
When I ran a virus total scan on some of them I got a couple that were concerning. Here is the one that most ...
1
vote
0
answers
67
views
Is having no driver installed better than having old driver?
How safe are installed & genuine-vendor signed old drivers, specifically when attackers are spoofing Microsoft and other vendor certificates?
On older PCs and laptops where some components are no ...
0
votes
1
answer
278
views
Web Site and ISP based Malware (adware)
Computers on our network have this weird issue that some web pages (mostly Turkish news sites, but not all) show a specific type of ad that looks like adware/malware. When I click to close them, they ...
CommunityBot
- 1
2
votes
1
answer
180
views
Malware abusing SSH agent active keys
I am thinking about this lately a lot, so I wanted to get someone else's opinion.
Let's say that I have an SSH key agent (e.g. Pageant or ssh-agent) running in background with loaded keys (keys were, ...
- 407
1
vote
1
answer
189
views
How I can read and handle MS Office documents, such as doc/ppt files, securely?
I've heard of too many horror stories of people opening a seemingly innocent docx or pptx file that they've got from a business partner, only to find out that it had embedded malware inside. What ...
CommunityBot
- 1
2
votes
1
answer
538
views
Are emulators isolated from the host for malware testing?
I know that virtualization is different from emulation; I was wondering if emulation is isolated from its host and any destruction on it will not affect the host as if it were a virtual machine.
I ...
CommunityBot
- 1
2
votes
1
answer
200
views
Is running rsync as root problematic?
Is there a security risk with running rsync as root to copy potentially malicious files? Or for that matter with any read command like cp, cat, du?
Background:
I'm moving data from various systems ...
CommunityBot
- 1
2
votes
2
answers
798
views
Is there malware that can run without user interaction after a download from the internet?
Is there malware that can run from a simple download from the internet autonomously without user interaction/initiation?
I know there are worms that can do that, but I assumed they needed to be opened ...
CommunityBot
- 1
2
votes
1
answer
2k
views
Can a malware steals my Facebook c_user, xs, and datr Cookies?
Just as the title suggests. I have a PasswordStealer on my PC and I'm afraid that it can do that. AFAIK, that malware can record keystrokes and steal saved passwords which I don't mind because I don't ...
CommunityBot
- 1
1
vote
1
answer
219
views
File sharing with compromised Windows machine
I want to connect a known to be compromised Windows machine to the network for file sharing, it has lots of pirated software installed therefor not secure. Can it be isolated so that nothing can ...
CommunityBot
- 1
3
votes
1
answer
903
views
Show confirmation popup before running any downloaded program in Windows 10
I often download files either using my browser or by torrenting. Few times, I encountered an attack where the torrented file was called something like movie.mp4.lnk and the target was set to run a ...
CommunityBot
- 1
0
votes
1
answer
308
views
Is it possible to protect browser credentials from malicious processes?
What items should be considered to create a browser that prevents all access to stored credentials by a malicious process? Hardware attacks being out of scope.
Are there public projects addressing ...
CommunityBot
- 1
0
votes
0
answers
72
views
I am trying to identify suspicious content within a PDF file
I have a PDF file that has been sent to me as part of a suspicious email. I viewed the email as message source from within outlook. This gave me all raw text within the email. I copied this to ...
- 1
0
votes
2
answers
142
views
DomainFronting - re-routing and SSL certificats
I'm looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting.
Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-...
CommunityBot
- 1
3
votes
2
answers
1k
views
How can user send malware code via input=file
After the file is uploaded via input=file it is converted to b64 standard. But what is the exact path the file is going through and where in javascript code we can catch that uploaded file. And if I ...
CommunityBot
- 1
0
votes
2
answers
424
views
Accidentally downloaded a Trojan.Dropper which Malwarebytes picked up, how to ensure system is clean?
So I was trying to download an arcade game, everything seemed legit and I guess I was too excited to play it I started running it - only after clicking it I decided to run a scan on both Avira and ...
CommunityBot
- 1
0
votes
1
answer
2k
views
read raw dump with WinDBG
Is it possible to convert a full raw dump memory and open it in WinDBG ? In order to inspect if they are no malwares, filter process who call particular API, dump each process in memory etc...
CommunityBot
- 1
6
votes
2
answers
4k
views
Can a bluetooth speaker contain malware?
Can a bluetooth speaker contain malware? If someone were to find a random bluetooth speaker laying around and tries to connect with it, is there a possibility that the speaker has malware in it?
- 128k
1
vote
2
answers
225
views
What are some symptoms of malware exfiltrating data in packet captures?
I am concerned that my Linux laptop has been compromised with malware that is remotely and regularly monitoring my activity. I ran Wireshark for a day to see if I could find any symptoms of data being ...
CommunityBot
- 1
2
votes
2
answers
640
views
opening infected files on Linux and Raspberry Pi
Considering Linux's reputation for being somewhat immune to infections, and the fact that most malware are written with Windows as a target, is it safe to open possibly infected files on a Linux ...
0
votes
1
answer
81
views
Malware in neural networks
Lately, there has been discussion about malware hidden inside deep neural networks, such as, EvilModel: Hiding Malware Inside of Neural
Network Models (pdf).
I understand the hiding part, but I would ...
- 947
0
votes
0
answers
93
views
USB Drive Malware (.lnk extension) Suspicions: Seeking Advice on Next Steps
I recently encountered a concerning situation involving a USB drive, and I'm seeking guidance on how to proceed.
The scenario:
I used an older computer to extract photos from a DVD and transferred ...
- 1
6
votes
1
answer
235
views
How to find malware added in supply chain to Android phone?
As has become a mainstream news story many times over, some Android phones are being shipped with malware preinstalled, because they go from factory to a second party who adds the malware and then to ...
CommunityBot
- 1