Questions tagged [malware]
Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.
2,507
questions
2
votes
1
answer
253
views
Does connecting a virtual machine to a guest wifi connection protect the host machine from potential malware if it is connected to the main network?
I have a windows 10 host machine that is connected to my LAN with other devices. It runs a VMware Ubuntu virtual machine that is connected to the guest wifi and has shared folders between vm and host ...
- 21
4
votes
2
answers
437
views
Can .ai files (Adobe Illustrator) be malicious?
They are blocked by our email gateway, but are also needed for some workflows. Can these files even contain malicious content and possibly execute code?
- 71
2
votes
2
answers
2k
views
Could the USB-Receiver of a wireless mouse/keyboard be a security risk?
I bought a wireless keyboard and mouse from a no-name brand (made in China) with a USB receiver. I'm currently wondering if the USB receiver could be compromised in a way, that my computer could get ...
0
votes
1
answer
154
views
Windows Security deletes my USB virus as soon as I plug it in
I am studying ethical hacking and I work in the cybersecurity department of a company.
I have been testing a hacking program but some PCs delete this executable as soon as I plug in the USB and some ...
- 1
0
votes
0
answers
138
views
Same miner detection by Kaspersky Anti-Virus after every boot up
I recently bought and downloaded Kaspersky. Since I downloaded it, after every reboot, it keeps detecting what seems to be a crypto miner. Every time it claims to delete it.
Should I be worried ?
Name:...
- 101
0
votes
1
answer
167
views
Can ransomware impact SSD drives?
I was watching this DefCon talking about Solid State Drives (SSDs) destroying forensic and data recovery jobs. It was interesting to note, that the speaker did acknowledge that it is unknown how long ...
- 715
0
votes
2
answers
140
views
DomainFronting - re-routing and SSL certificats
I'm looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting.
Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-...
1
vote
1
answer
244
views
Does using a Hyper-V Ubuntu VM add more security when web browsing?
I've always been concerned that my casual browsing of the web directly from Windows 10 could infect my PC.
How much added security (if any) could be obtained by using Hyper-V to run an Ubuntu 22.04 ...
0
votes
0
answers
353
views
Suspicious incoming connection attempts from random IPv6 addresses on local network on macOS
I've been using Little Snitch on my Macbook and I have since a long time a rule to alert on any incoming IPv6 connection, which would be suspicious since I use IPv4 only.
Since a couple of days I've ...
- 101
0
votes
3
answers
1k
views
Is it safe to use pirated software if AVs don't detect anything malicious about it?
I want to know whether it's safe to use a pirated software if during all of the processes including (downloading, running installer, installing, using and scanning installed files) the system's ...
user279925
0
votes
1
answer
128
views
Using PDF files from dubious sources
In one of my university courses, the lecture materials (solutions to homework assignments) are not fully supplied by the university itself, but have to be created by the students themselves: The ...
0
votes
0
answers
292
views
Does malware use Oracle RDBMS Kernel Executable (oracle.exe) to steal data?
I'm worried that my computer may have been infected by a virus. My Windows Virus Scan says that nothing came up, and a Chrome malware scan also turned up nothing. However, a process called Oracle ...
- 115
1
vote
3
answers
426
views
Do standard USB chargers contain any OS or firmware that might be infected with malware?
I'd like to know if it is possible to figure out if the USB charger of my smartphone (more info below) contains any operating system or firmware which could be infected by malware.
Let's assume I ...
2
votes
3
answers
471
views
Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?
Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?
If not then is there any way to visit a malicious ...
- 31
1
vote
0
answers
135
views
Was the kernel I used vulnerable/deprecated?
Background Information
As I developer I am running multiple (partly virtual-)machines with Debian GNU/Linux and on some of these machines I work with highly confidential documents or dangerous ...
- 11
0
votes
2
answers
190
views
For someone who deals with dangerous files and websites frequently what is the way to avoid getting infected by spyware/virus permanently?
For someone who deals with dangerous files and websites frequently or even for the general user what is the way to avoid getting infected by spyware/virus permanently?
I am looking to buy a new laptop ...
- 31
0
votes
1
answer
248
views
Malware file path
How is file location implying if a given file is possibly a malware or not?
Example:
Let's take windows wmiprvse.exe file. Web search results will often give you results similar to:
"If this is ...
- 3
0
votes
0
answers
25
views
How to get rid of TrustedStreams.life malware? [duplicate]
I have a Windows 11 PC, and several members of my family who aren't terribly savvy about what notifications they click "OK" on. Result: I now have some kind of malware called "...
- 1,027
0
votes
1
answer
375
views
How malware file signature is generated?
How is the malware file signature generated? Does it use a sequence of bytes in the beginning, size, PE (export, import, section), etc?
And can the MD5 or SHA256 be considered a file signature for a ...
- 113
2
votes
4
answers
4k
views
Can malware spread through HDMI, Display Port or USB
I have to give a presentation at my university. In the room where I'm going to give the presentation, there is a projector with a HDMI, Display Port, or USB connection. I will have to plug one of them ...
0
votes
1
answer
713
views
Boot virus on GPT?
I remember that some rare viruses can hide in MBR(it's 512bytes space).
It's difficult to be detected and even if I reinstall operating system, the virus won't disappear.
But how about it on the new ...
- 21
0
votes
1
answer
178
views
What are the best security practices when when using VirtualBox on Windows 11 with an old OS?
Got a cheap new laptop to play old games with a VM of Windows XP/7, with the host being Windows 11.
Using a WiFi that isn't my own (as I don't plan on connecting to the internet with this laptop) I ...
- 1
2
votes
1
answer
695
views
Can an ISO file be harmful if opened as an archive?
I was trying to download something off a sketchy website, and ISO was a reasonable extension for what I was trying to get, but I was still pretty sure it was malicious. I didn't put much thought into ...
1
vote
0
answers
56
views
How to debug javascript code with Windows functions on Linux?
I am a beginner in analyzing javascript code on Linux and whenever the code is for a Windows machine I cannot proceed with debugging because there are undefined functions.
Examples:
GetObject(_6078(1),...
- 13
0
votes
1
answer
292
views
Why it's safe to use used RAM?
As we know, instructions are stored in RAM. So, can I embed a controller chip (or something like this) that can change the content of RAM? (e.g. change the Windows 10 boot instructions into malicious ...
- 21
0
votes
1
answer
176
views
Strange Root CA certificate in Windows Trusted Root CA Store
While reviewing Root CA certificates in Windows Trusted Root CA Store I came across a stange Root CA certificate with Issuer Desktop-XXXXXXX and Subject Desktop-XXXXXXX, enhanced key usage for server ...
- 1
0
votes
1
answer
274
views
No antiviruses scan graphics cards VRAM for malware?
As I know, for antiviruses the VRAM is a blindspot, so casual Windows users like me can't do much about it. They have an antivirus, which doesn't even search for malware in VRAM.
What's the answer for ...
- 39
0
votes
2
answers
3k
views
Is it still possible to embed executables in PDF in 2022?
I have searched and found those posts how to embed exe file to pdf? and https://stackoverflow.com/questions/2941700/can-i-embed-an-exe-payload-in-a-pdf-doc-ppt-or-any-other-file-format, but they are ...
- 15
-1
votes
1
answer
192
views
Unknown localhost connections: Is this indication of continued compromise of device?
I have a stalker, and six months ago, he got my someone to evil maid my devices with a USB stick that person had borrowed (which then took me three months to discover). This attack appeared to have ...
- 1
0
votes
0
answers
69
views
Malware sinkhole evasion techniques
I have read into malware sink holing, as a way to disrupt botnets.
There are also approaches to make this more difficult, for example using a Domain Name Generator algorithm which is what the ...
- 181
-1
votes
3
answers
147
views
Do some malware/viruses stay on the internet basically indefinitely?
Biological viruses stay in the population essentially indefinitely. We have immune systems, but this somehow doesn't cause virus strains to completely disappear after some time, as everyone's immune ...
- 99
2
votes
1
answer
802
views
Adguard adds adware like JavaScript code to each page render. What is it?
I'm using Firefox 101.0.1 with the extension AdGuard from the official Firefox add-ons page. When this extension is activated, I find strange adware like JavaScript code with the dev tools, evaluated ...
- 175
0
votes
1
answer
734
views
How can malware remain on PC after I format my HDD? [duplicate]
How can a virus remain in the system after formatting the whole HDD?
What are the ''types'' and how to remove them?
- 1
0
votes
0
answers
101
views
How to fix deceptive site ahead warning on a wordpress site
I have an issue with my website, when visitors try to access it shows the deceptive site ahead warning I used google search console to try to fix it (as I successfully did it previously with some ...
- 103
0
votes
2
answers
321
views
BadUSB and external USB peripherals - is using a USB device in a sandbox a risk?
I would like to ask about "BadUSB" vulnerability real world attack vectors. I got this idea, because I use virtual box as a sandbox for checking incoming files from clients (I am not an ...
- 33
-1
votes
3
answers
310
views
What prevents Windows from being as secure as Linux? [duplicate]
According to wikipedia, Linux's security compared to Windows is generally due to "the malware's lack of root access."
Why doesn't Windows just fix this?
- 7
32
votes
1
answer
6k
views
Should I worry about compromised firmware when reinstalling an OS?
I have a machine that I suspect to be compromised and am installing a new OS from a usb. I know that there have been cases of malware surviving this, and even BIOS-reflashing, and something about the ...
- 331
2
votes
2
answers
336
views
Suspicious "ChromeSync" pop-up in Android requesting credentials
Since late May, I have been getting suspicious pop-up messages overlay on top of android Apps (see screenshots), requesting entering of the "ChromeSync Passphrase" for my google account.
I ...
0
votes
2
answers
811
views
Is it possible for a Windows virus to jump in partitions that are for ubuntu and are not visible in "This Pc"?
I installed Ubuntu on my computer a year ago (dual booting) but I created partitions that are exclusively for Ubuntu.
This is how some Ubuntu partitions look on Disk Management.
On Windows I have ...
- 3
0
votes
0
answers
117
views
What is the steps to be taken when you suspect a linux malware has infected your computer?
Using Linux is a different beast entirely but sometimes malware can blend as seemingly harmless system binaries like this post
Bpfdoor
Like this post which documents a highly evasive Linux malware.
...
- 109
1
vote
1
answer
360
views
What is a safe way to display malicious URLs in research PDFs?
Is there a convention or safeguard to show malicious URLs in a paper if they are relevant to the topic?
Some PDF viewers parse the text for URLs, which makes removing the hyperlink alone insufficient. ...
- 13
1
vote
1
answer
213
views
File sharing with compromised Windows machine
I want to connect a known to be compromised Windows machine to the network for file sharing, it has lots of pirated software installed therefor not secure. Can it be isolated so that nothing can ...
- 11
0
votes
4
answers
694
views
If your router gets hacked, can the hacker acquire your RSA private key to decrypt HTTPS and view full URL's?
In order to decrypt HTTPS you need the public key and the private key. How can a hacker acquire the private key?
What exactly does he have to do to get it? I read that they use packet sniffers like ...
- 11
0
votes
1
answer
231
views
Non executable virus?
Bitdefender detected
.class -- File path: ...\tetra-1.12.2.jar => .../GuiStats.class -- Threat name: Java.Trojan.GenericGBA.31135
.tif -- File path: ...\crash-81154...60f8.tif -- Threat name: ...
0
votes
1
answer
403
views
unknown (malicious?) code and file in public dir (Laravel 5.8, apache/cPanel) [duplicate]
I have a Laravel 5.8 app in a server running Apache/2.4.53 (cPanel) and PHP 7.4 (ea-php74) and i have VPS root WHM/cPanel access there. as any Laravel project, the "public" directory is web ...
-1
votes
1
answer
147
views
Malware from Android text?
Lots of questions!
I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
0
votes
1
answer
271
views
How can a backdoor install a Chrome extension?
I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
- 1
2
votes
3
answers
4k
views
If someone knows your wifi password can they hack your router?
What exactly can someone do if they know your Wifi password? Can they only see which sites you visit or can they do more? Are they able to hack(router) and do malicious things with your router just by ...
- 21
3
votes
2
answers
789
views
Has malware detected mitmproxy and similar tools used to intercept and analyze malicious traffic?
When trying to analyze malware, have there been cases where malware detected the use of mitmproxy and ceased operation?
If that has happened, would it be a good idea to be constantly using a proxy as ...
- 1,552
56
votes
3
answers
12k
views
Does open source "protestware" represent a security risk?
Since the beginning of the Ukraine-Russian war, a new kind of software was created, which is called "protestware".
In the best case, the devs only add some (personal) statements about the ...
- 1,366