Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
1
vote
3answers
115 views

Bought a new Laptop. Can't reset. Is it Safe?

I recently bought a new laptop from a third-party seller on new egg. The seller states that it is "upgraded": "*We sell computers with upgraded configurations. If the computer has been ...
0
votes
0answers
17 views

I ran an exe file on my computer [duplicate]

I downloaded a crack file today, Idk why I thought its safe to run, now my pc is infected. I already used Tronscript, kaspersky and hitman what else do you guys suggest me to do? thanks in advance. ...
0
votes
1answer
70 views

Can malicious binaries run from Program Files?

I've been seeing a few false positives from our AV Carbon Black pertaining to wordpad (wordpad.exe) use. The alert I'd see is The application wordpad.exe injected code into another process. Upon doing ...
0
votes
0answers
19 views

Can malicious code running in isolated Electron's renderer process send data to attacker's server?

I'm trying to evaluate if a malicious npm dependency running in Electron's app renderer process (which has sensitive information) could send data from the webpage out to an attacker's server (or trick ...
0
votes
1answer
43 views

How can I prevent a C&C server from accessing my device?

Let's say I visited a malicious website and it downloaded malware that registered my phone to a C&C server And after realizing what happened I uninstalled the malware from my device Will my phone ...
2
votes
1answer
52 views

Is it safe to view video files on Google Drive online?

I have a video file on my Drive which is very old but I am not sure whether it's infected or not. Is it safe to view this MP4 on Google Drive (no downloading only viewing it in the Drive app)?
0
votes
0answers
19 views

Wondering how to verify devices are still not compromised after reset?

So I am wondering how I can possibly verify different devices that I purchase. Like when you want to verify a file has not been changed you can verify the checksums. So for example, if I buy a new ...
0
votes
0answers
87 views

MacOS Mail app suddenly Opened trying to send message to a suspicious email

I'm on MacOS Monterey 12.0.1 and suddenly my Mail App opened to a "Compose" window which was addressed to a sender with address m.iPCMtmJsFmCms-Kma@pcm-m.l" m.iPCMtmJsFmCms-Kma@PCM-m.L. ...
0
votes
0answers
19 views

Any approach to copy the disk and take RAM shapshot of RouterOS (Mikrotik)?

everyone! I have discovered suspicious activity on one of Mikrotik Routers. This device had an outdated version of RouterOS with open ports web, winbox, etc. I believe that it was infected by malware, ...
0
votes
0answers
13 views

Could my Windows 7 VM access my network and perhaps my host internet history or data?

I have a Windows 7 Pro VM running on an Ubuntu 20.04 host. I'm a bit new to VirtualBox and set up the VM but it was too slow to do anything so I took a snapshot and closed it. I think my Ubuntu host ...
2
votes
0answers
37 views

Is "drag-drop files" computer backup sufficient to avoid most malware/ have all my files?

I'm debating dragging all my files onto an external hard drive manually - rather than a time machine backup - and then pulling over any specific files I need if I ever need them. Afterwards, I'll ...
2
votes
1answer
53 views

How to make sure my laptop (Ubuntu 20.04) is secure with a Windows 7 VM?

I have an old laptop which is running Ubuntu 20.04 and I am planning to use a virtual machine of Windows 7 Pro (using VirtualBox maybe). As its an old laptop and not my primary source of using the ...
0
votes
1answer
54 views

What can happen when you click on a bad link? [duplicate]

I sleepily clicked on this bad link yesterday (DONT CLICK Unless you know what you're doing: https://6to.me/idsoni7kjv with a "?fbclid=" param - presumably identifying me) I'm wondering how ...
0
votes
0answers
55 views

False Positives for YARA rule

I've run a malware ruleset from the Yara rules repository run on my Sys32 directory yara64.exe -f -r ./malware_index.yar C:\Windows\System32 and come across a lot of positives (+extra counts) for ...
0
votes
0answers
39 views

Can SVG be a potential threat for tracking scripts and similar?

Since SVG files can have JavaScript, which would get executed is it a potential threat for malware, tracking scripts and similar stuff?
0
votes
2answers
105 views

What are the best steps to take to secure a LINUX PC from physical attack? Evil Maid, Boot Sector Malware?

What would be the best security practice to protect a device from physical attack? For instance an Evil Maid or boot sector malware? For this question we are going to go with a UEFI boot debian linux ...
0
votes
0answers
154 views

crl.comodoca.com is a legit crl site, how can I determine it's legitimacy when bad actors are attempting to abuse uncertainty about the site

Yesterday I noted in my router logs that my wife's laptop accessed crl.comodoca.com. She was not using the machine at the time. A quick google search found three sites claiming this was an ...
0
votes
0answers
41 views

Accidentally clicked on a malicious URL that on later research lead to a dead URL. Could it have done anything/were my precautions good?

First time question after lurking every so often. This issue has me a little riled, and would love to know more on how I did/if it did anything, as well as peace of mind on the subject. Today/morning, ...
6
votes
2answers
288 views

Do antivirus programs increase your attack surface and potentially give more power to malware?

When I was a student one of my professors used to say that an antivirus actually increases your attack surface by injecting itself into system processes and let's say opening more doors for ...
0
votes
0answers
30 views

Is it possible to be infected without installing anything like said at the beginning of the video? [duplicate]

It seems like a 'crazy' claim that John McAfee makes at the very beginning of this video, is it true? "Over half of all smartphones, both iOS and Android are infected with keystroke logging ...
0
votes
0answers
22 views

If a malware infects a usb, will formatting remove it? [duplicate]

My computer probably had malware. Decided to install linux and do a disc wipe using a linux distro called Pop!_OS (ubuntu based) Can a piece of malware/virus inject itself into an ISO According to the ...
0
votes
1answer
103 views

How common are firmware infections?

Hard drive firmware infections were documented in 2015: The hacking tool, believed to be a product of the NSA, is significant because subverting the firmware gives the attackers God-like control of ...
-2
votes
1answer
71 views

Online service to download file from URL directly as zip [closed]

Is there an online service which allows to download a file from a URL directly zipped? I want to analyze a potential malicious JavaScript file with some automatic anti virus engines but I don't want ...
1
vote
1answer
86 views

Cross OS GPU based malware

I've been doing some research into GPU based malwares, and would like to know if there is a way to run them on a dual boot scenario with the code being executed only on one Operational System and be &...
0
votes
1answer
83 views

Is malware a threat vector for REST APIs?

Let's assume we have REST API in which you accept GET and POST HTTP requests without the ability to execute files. Is it possible to execute malware in this scenario? Would there be any justifiable ...
1
vote
0answers
99 views

How can I know if phone is already infected?

Last year, my friend who is learning hacking for nearly 3 years hacked my phone using social engineering by installing some malware in my phone. (After researching on Google, I think it might be a ...
1
vote
2answers
80 views

Vulnerabilities in Receiving User-Submitted PDF Files Through HTTP(S)

For context; I have a web application that allows users to upload a PDF file from which the web app extracts certain information by parsing it. The app then sends this information to another server ...
2
votes
1answer
169 views

How do hackers use C&C servers without revealing their identity and keep them up?

I recently watched a couple of YouTube videos about malware analysis and in most of the cases, the reverse engineer easily found out which IP address the malware connects to. Usually, there is a link ...
0
votes
1answer
80 views

How to detect whether request to a URL from a system is made through a browser or through a software/malware

I am using FortiAnalyzer-VM64 v6.4.2 GA build2122. Many requests are logged in my firewall/UTM log that are to malicious websites. Although these requests are blocked by the UTM, the problem is that I ...
1
vote
1answer
122 views

How can I wipe an infected SSD [duplicate]

Recently my PC fell subject to some malware. The malware is hidden and all the antivirus software can't find/detect it. The things it has done so far is spyware like, it disabled System Restore from ...
25
votes
9answers
8k views

How is it possible to get infected with malware by opening a file on a Mac or Windows machine?

Corporate security trainings keeps saying "download a file from the web or email attachment and open it and you might become infected". I know this used to be the case on old Windows ...
0
votes
0answers
17 views

Used Router - How to Factory Reset Custom Firmware? [duplicate]

I received a used router R7000 with Merlin custom firmware. I'm no router expert by any stretch of the imagination. What do I need to do in order to factory reset the router and wipe the Merlin ...
0
votes
3answers
179 views

Can spyware be downloaded and installed on Android phone in a minute or less?

Following Scenario: You unlock your phone and you give it to someone so they can promply check it out (since it's a new phone). Now let's presume that the very exact person has intentions to install ...
0
votes
1answer
155 views

Is it possible for malware to infect google drive?

If I move a malicious file to Google drive, can my other files there get infected? Or can my google account itself get compromised?
1
vote
0answers
124 views

Looking for origin/ verification of malicious domain names [closed]

My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
0
votes
1answer
91 views

Can you subvert a physical system at runtime?

In case of a virtual machine it is possible to break out of the VM and gain code execution on the host. In that way you could evade any detection mechanism for malware inside the VM and maybe even on ...
0
votes
1answer
60 views

WMI commandline utility, console window host, and windows command processor all opening for a split second

Basically these 3 processes open for about 1/3 of a second and then instantly close on my task manager. I don't know what it is and I wasn't able to find anything on google about it. I am a little ...
0
votes
0answers
21 views

Decode malicious javascript [duplicate]

Probably as most of Facebook users I receive many malicious requests with link and JS. I usually delete or ignore them, but now out of curiosity decided to research it. I've unsuccessfully tied some ...
0
votes
0answers
125 views

Hijacking a WhatsApp session

If a device running a WhatsApp account has already be compromised. Can the attacker steal session cookies/encryption keys on the device and establish a persistent connection to receive calls and ...
0
votes
1answer
92 views

If I dedicate one computer to answering emails, and turn network discovery off, will that help protect the rest of my network from malware?

My boss is very concerned about malware. He has heard that malware usually comes in via email attachments, and so he wants me to set up a computer specifically for that task and isolate it somehow. Is ...
0
votes
1answer
71 views

Analyzing potential threats from re-directs

I just clicked a link on pinterest to take me to the source website. Upon clicking, it took me to the following 5 links: https://s3.amazonaws.com/bishkek0303/decorative-graphic-design-element-in-...
0
votes
1answer
146 views

SSD supports hardware AES encrytion. hdparm does not report a "Security" section. Should I be concerned?

Note that this is a different case from similar question asked 7 years ago, here: hparm -I /dev/sda does not report a Security section - should I be concerned? In my case the SSD (part number: ...
0
votes
0answers
121 views

Where is malware stored online before it is downloaded?

Where can malware be stored online? I've looked at several websites about malware infection and it mentions things like drive-by downloads and exploit kits, but I can't see where the actual .exe, ...
0
votes
3answers
206 views

What to do after opening a potentially malicious link on smartphone?

What must one do if they opened a malicious link? Warning: Please do not open the links below as they may be malicious. They have been deliberately mangled to prevent accidental opening I received an ...
0
votes
0answers
18 views

Can a computer be infected via local network while powered off [duplicate]

If one of your machines have a virus or breached certain protocols where drivers have been installed where they could potentially be malicious, i.e virus, worm etc., would the virus/worm be able to ...
5
votes
1answer
579 views

Any legitimate reason for notepad.exe to make network connections

Is there any known legitimate reason that notepad.exe would make network connections to a domain controller? I observed this behavior. The first connection was to port 135 and the second was to one of ...
0
votes
0answers
62 views

Hybrid-Analysis.com indicates the website that my macOS system is contacting is likely malicious

Backstory: I just upgraded my MacBook from OS X 10.11.6 to the most updated version of macOS, 10.14.6 Mojave. I also have the Little Snitch network filter installed. I know nearly nothing about ...
0
votes
1answer
109 views

Is it possible to protect browser credentials from malicious processes?

What items should be considered to create a browser that prevents all access to stored credentials by a malicious process? Hardware attacks being out of scope. Are there public projects addressing ...
0
votes
0answers
94 views

Security of Third Party Plugins in Thunderbird

In Thunderbird (a popular open source email client), there is an extension store similar to Mozilla Firefox which adds further functionality to the client. Mozilla has an article detailing the ...
0
votes
3answers
148 views

Is it safe to open email links in a private window?

Sometimes there are links on the email you have to click because they are agrements, but they are coming from a different URL. As of now what I'm doing is opening a private window and pasting the link ...

1
2 3 4 5
47