Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
0
votes
1answer
102 views

Utilising 3rd-party AV definitions with ClamAV engine

I have ClamAV/engine pretty widely deployed on most of my Linux/UNIX/POSIX & other boxes - including gateways & at-rest storage, but I've found the ClamAV definitions... lacking... sometimes. ...
1
vote
2answers
123 views

Can a ransomware attack succeed with no root privileges, but instead if it does have privileged user access?

If an attacker succeeds in getting the password of an IT support privileged account (that has Domain Control rights), can he successfully carry out the attack and do the lateral movement needed ...
0
votes
0answers
65 views

Can browser extention be compromised via cookie hijack?

Recently my PC has succumbed to an attack of this form caused by trojan and most propably all my cookies from Firefox were stolen. I concluded that after finding out that someone logged on to my ...
0
votes
0answers
117 views

BING default search enginge Firefox malware?

Whenever I open Firefox, it starts with the BING search engine. The default search enginge of Firefox was set to "MyFireSearch" which I changed to Google. I also have no extensions that ...
0
votes
0answers
83 views

Is W^X enforced against UEFI DXE drivers (firmware)? Could it be if we tried?

W^X is a critical security feature, allowing us a chance to perform security analysis on data that some entity on a computer wants to execute. Windows implements this by requiring a process to call ...
1
vote
1answer
158 views

Does a virus (malware) ever expire?

There's a possibility that my old USB stick (which I haven't used in over a year) got a virus-infected audio file (AAC) among other trusted files. Can I safely open the trusted files bypassing the ...
0
votes
1answer
113 views

Windows defender detected and quarantined this: HTML/Phish.GR!MSR. Is there anything further I should do to check my computer has been affected?

Windows defender detected the trojan HTML/Phish.GR!MSR and quarantined it. After that, I scanned the computer with Malwarebytes and it found nothing. I can find very little information online about ...
0
votes
0answers
28 views

Is verification code a scam? [duplicate]

When facebook sends the confirmation code, the name FACEBOOK is not displayed as the sender,, instead phone numbers of different countries. Until now, it was only on my notebook, but today I synced my ...
0
votes
0answers
46 views

WP Blog with phishing js file by a Google Search Result? [duplicate]

I wanted to check the WP homepage of a friend of mine, so I googled "rafaeltheissen be piano". The first Google result seems to point to the official page: https://rafaeltheissen.com/ Here ...
1
vote
2answers
218 views

What is Malware Family: pva.intowow

I've gotten an e-mail from my ISP saying that one of my devices might be infected with malware. In the e-mail they have provided me with some information about the malware but I'm having trouble ...
0
votes
1answer
210 views

Could there be malware in a video on twitter? [duplicate]

I don't know anything about security. I want to download the videos I like from twitter. And I'm not going to do it by writing a program. I will manually find the necessary link in the html document ...
4
votes
2answers
683 views

IoCs of Pegasus spyware penetration

What are the indicators of compromise (IoCs) that indicate methods used by the Pegasus spyware on mobile phones? How is penetration still possible when the latest and up-to-date OS of the phone is ...
0
votes
2answers
240 views

Why are web browsers insecure?

Currently in the news is yet another hack, this time from NSO and it is reported that an attack vector is via a web link. This is far from unique, as we have got used to advice to not click on "...
-1
votes
1answer
144 views

What is this obfuscated JS code trying to do? [closed]

I received phishing email that contains base64 encrypted JS code in the attachment. I decrypted it but can't understand it because of obfuscation. Do you guys have any clue what this code is trying to ...
0
votes
0answers
66 views

Is it possible to get malware using cat command? [duplicate]

I want to know is it possible to get malware using cat command from some text files like printf '\033[H\033[2J\033[3J' > file.txt?
1
vote
2answers
131 views

Create memory image of infected machine without risk

I am pretty new in the security world and I am writing a procedure on how to create a memory image of an infected machine for forensics. The problem is that the machine does not have the tools for ...
2
votes
0answers
93 views

Process Injection and Process Isolation by OS

If the OS is responsible for ensuring that one process cannot access another process memory space, and the point of process isolation is to keep processes separate from one another, then how can a ...
3
votes
1answer
231 views

Kinsing Malware entering via compromised Dockerhub Images?

I got a server infected with the Kinsing malware, which mines crypto on your server, maxing out your CPUs. The malware initially creates the files /tmp/kdevtmpfs and /tmp/kinsing If you delete these ...
0
votes
0answers
19 views

Infection from website [duplicate]

I wanted to learn more about keyloggers and how to protect myself from them. I clicked on a result from google, but the site seems to be infected. Link to Sucuri results Do I need to reinstall my ...
1
vote
1answer
97 views

Could video streaming pose a security threat?

lately I have wondered if through video streaming you could get infected by some type of malware, can it be possible? I have two cases I would like to consider, lets say I stream a video that was ...
0
votes
1answer
56 views

Odd Kerberos Hosts After HD Wipe, and fresh OS re-install

After reformatting my hard disk and rebuilding/re-installing the latest macOS operating system, I found the following IP addresses after running Kerberos.internal.com: kerberos.internal.com has ...
0
votes
1answer
80 views

DNS local cache spoofing with malware or RAT

I was learning networking and knew that browsers don't have algorithms to convert domain names to IPs. It queries a DNS server. After that, the computer remembers the IP, so next time the domain is ...
-1
votes
1answer
119 views

Is it possible to change the string of EICAR file? [closed]

Is it possible to change the string of EICAR file and still detectable? For example, print "KGMAL" instead of "EICAR".
0
votes
1answer
163 views

How to verify there is no malicious code in an opensource library?

I am planning to use an opensource library to my project instead of developing from scratch. How can I verify there is no malicious code in the library or someone cannot access my files? Currently ...
1
vote
2answers
121 views

Has exploitation been demonstrated against the fundamental constructs of the debugging process?

I'm curious to know if an attacker can fundamentally exploit the debugging process. I'm not asking if specific debugging tools have been exploitable, surely some have, but rather whether the process ...
0
votes
0answers
61 views

Ad popups showing on personal website deployed on VPS

I have a Spring-MVC webapp deployed on a Hostinger VPS server (OS: Ubuntu 18.04, Apache2 + Tomcat servers). For some reason, every now and then, clicking on random regions within the web pages of my ...
2
votes
1answer
153 views

Is there a way to record CPU operations for a given process as they occur in a standard, production OS environment?

Doing malware analysis I'm interested in being able to log every instruction the CPU executes for a given process. I was hoping this was perhaps possible in a standard VM environment, even if not ...
0
votes
1answer
405 views

Difference between a RAT and a hVNC

What is the difference between a Remote Access Trojan and a hidden Virtual Network Computing? It seems that both software allows a hacker to access a victim's computer and to spy on activity.
0
votes
2answers
181 views

Haven't updated my Windows 10 for more than a year

Almost a year ago, I dual-booted Windows 10 and Linux Mint. And since then, I haven't booted into my Windows 10 OS. I still remember that the Wi-Fi adapter was off when I shut my Windows 10 down. Now, ...
0
votes
1answer
108 views

Is it possible for a compressed file to contain malicious code?

I recently downloaded 2 compressed files (.zip and .rar) from a really unreliable and untrusted source while using a browser integrated VPN. My antivirus didn't notice anything but I am curious if it ...
0
votes
1answer
115 views

Can a video file contain code that shares your identity? [duplicate]

Could a video file contain code that reveals and sends your ip/mac address or give access to personal files to somebody else? Would normal video players (like VLC) be able to notice that kind of ...
1
vote
2answers
211 views

How to securely create a bootable USB drive from a possibly infected system?

I'm not sure about my system so I want to completely wipe my HDD and reinstall Windows 10. But I realized that an infected system can also infect a USB bootable drive. Unfortunately, I don't have ...
0
votes
2answers
349 views

Is it possible for someone to spy on an Android phone without using spying apps?

Can a “bad guy” spy on an android phone without installing spy apps (those apps that require payment)? By “spying”, I mean using key logger, screenshots, read messages and so on. Is it possible to spy ...
0
votes
2answers
149 views

How does a browser stop malware from executing? [duplicate]

When it comes to infections with viruses, in almost all cases the initial infection requires some sort of user interaction - apart from those cases where a plug-in has some sort of security flaw which ...
0
votes
0answers
26 views

how to check a device (mouse, USB-VGA, USB-HDMI) contains no malware [duplicate]

I got my fingers seriously burnt with some garbage bought online, which was a USB-3.0 to VGA cable. It contained a driver that requested an install, that led to my computer being unstable and a few ...
0
votes
0answers
120 views

Dangers of switching sim from old phone to new one

I would like to know the dangers of switching an old sim card from an old phone to a new one. I recently got a new phone and a paranoia woke in me. Lets assume that the old phone was infected with ...
1
vote
1answer
179 views

Is it still possible to get a virus simply by visiting a website? [closed]

I know this is a duplicate question, but there aren't any recent updates on the answers given to this question(here and here) and after a few years, I'm sure browser security has improved drastically. ...
0
votes
1answer
90 views

Will a virus/malware travel between devices when logged into the same Google account

If my laptop/desktop got infected with malware or some kind of a virus, will it be safe to log in the account on my laptop to my new PC or will it spread to it because I used the same account for new ...
1
vote
1answer
69 views

Obfuscating android malware [closed]

I am exploring android malware forensics and am trying out payload generation and delivery, while also trying obfuscation. I have used commercial tools, e.g. ProGuard and also open sourced tools, eg. ...
0
votes
0answers
372 views

How does PUA:Win32/InstallCore get on my PC?

I run a full (not quick) scan of Windows Defender every night. Somehow, between two nights ago and last night an instance of PUA:Win32/InstallCore got placed on my PC. Windows Defender removed it, ...
4
votes
1answer
169 views

Is Sleep mode safe?

If a PC has rootkit, when it goes into sleep mode, can rootkit do anything to it while it’s in state of sleeping? Meaning steal data, open programs and basically do anything. Assuming it’s not BIOS ...
13
votes
5answers
6k views

Why are there more research papers on Android malware than iOS malware?

Based on this question. Why are there more research papers on Android malware than iOS malware?
0
votes
0answers
26 views

How safe and practical is torrenting? [duplicate]

From my understanding, torrenting differs from standard downloading because it will get pieces of the file from other torrent clients, making it faster (and decentralized if I'm not wrong). How safe ...
0
votes
1answer
469 views

Why don't researchers care about iOS malware? [closed]

I see Android malware being mentioned when reading peer reviewed papers about malware detection for smartphones, but iOS is never mentioned. Even Malwarebytes says: Historically, iOS has never been ...
1
vote
0answers
81 views

Android System Update Spyware Can Steal Your Photos, Money, Record Calls and Track You Too. What to do if this happens? [closed]

I came across this website and suddenly I got worried. What worries me is apart from the system update threat mentioned I have been visiting so many sites, clicked on pop-ups, downloaded apps from ...
0
votes
0answers
81 views

Sending meaningless Addresses requests to a series of malicious IPs

i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/ the request ...
0
votes
1answer
88 views

Changing Linux system files by malware from another OS. Is it possible?

Is it possible to infect important Linux system files with a malware from another operating system? For example, you are using Windows, you have a disk with the Debian operating system connected. You &...
0
votes
0answers
51 views

ThinkPHP show my website as the req.host - did the request really come from my web server?

I have ThinkPHP wordpress garbage coming at my server https://medium.com/@knownsec404team/analysis-of-thinkphp5-remote-code-execution-vulnerability-5de8a0afb2d4 , for example: /public/index.php?s=...
0
votes
2answers
731 views

I clicked on a grabify link and I don't know if it installed a virus [duplicate]

I was in a discord recently and someone sent a grabify link. I clicked on it and it led me to a soundcloud page. I think my firewall on my router is alright, is that enough to prevent them from doing ...
1
vote
1answer
320 views

Can I get malware from a .rar file without opening it in Android?

I was on a group with almost 200k people on it in Telegram. One of these members (probably new, his account is now deleted) sent me (and to other people too) a file named "Customer deposit H.rar&...

1
2
3 4 5
47