Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

Filter by
Sorted by
Tagged with
0
votes
0answers
72 views

Can attackers send commands to/control infected air-gapped computers?

I've been reading up on malware that can bridge air gaps between computers, like GSMem, Funtenna, etc. In the papers and articles I've been reading, the researchers mostly talking about getting files ...
0
votes
1answer
68 views

Applications modifying the location of python.exe, what are the dangers?

I have program called pdfelement installed (from Wondershare). I also have Google Cloud Sdk installed. Today, when I ran a command from the google cloud sdk (which uses python) I noticed that path ...
0
votes
0answers
38 views

How to analyze files for malware using steganography? [duplicate]

There are ways that a file [.jpg, .pdf, .png, etc..] can contain a malware using steganography. How can a file be analyze in order to verify it doesn't contain any malware?
0
votes
2answers
222 views

Can an empty, but used, usb flash drive that has NO firmware within it be infected with malware?

QUESTION: Can an empty, but used, usb flash drive that has NO firmware within it be infected with malware? I have been told by a networking and security expert that malware will only attach to (write ...
7
votes
2answers
3k views

Can BadUSB be avoided by looking at the shapes and the controller model inside it?

I'm an average user. I don't take part or have any dangerous jobs. I know that there is no fixed solution for this type of attack. However, I think USB is still become common devices for average user. ...
0
votes
1answer
65 views

Seeking recommendations/warnings for creating a server for malware sample upload and analysis

I am trying to conceptualize a server where users can upload potentially dangerous malware samples to a server. They would not need to be stored in the file system per se but kept in memory long ...
1
vote
1answer
333 views

Preserving anonymity with ring 0 malware infected PC

I am attempting to determine whether it would be possible to maintain your anonymity while using an internet-connected PC infected with ring 0 malware. The threat model assumes the adversary is ...
0
votes
1answer
104 views

Is persistence via scheduled tasks possible if the user is not elevated?

As far as I can tell, scheduled tasks may only be created by those in the Administrators group by default. Does that mean that persistence can't be achieved via this method without gaining elevated ...
0
votes
0answers
75 views

Is quarantine threats absolutely necessary? Every time I do, all my Chrome tabs crash

I have been talking backwards and forwards with a MalwareByte support, because every time I run 'quarantine threats' all my Chrome tabs crash. This guy keeps asking me to switch Google sync off, and ...
0
votes
1answer
80 views

Protecting my machine from running untrusted applications

I was big fan of the Toontown Online MMO when Disney used to run it so I was excited to learn that it had been revived by a fan or group for fans building on the original source code. During a recent ...
0
votes
1answer
172 views

How to check which process is modifying my clipboard?

I'm on Windows 10 last build and for a few days it looks like I have a malware that modifies ethereum addresses in my clipboard. I sadly tried a lot of antivirus, antispyware and nothing is found. I ...
1
vote
0answers
98 views

Suppose a mischievous coffeeshop wifi gateway wants to drain phone batteries

Suppose a mischievous coffeeshop wifi gateway wants to drain phone batteries. It is easy to see how it might weaken signals and flip a few bits to wreak NAK havoc at the link level so wifi chip power ...
1
vote
2answers
185 views

Why don't antivirus definition files get detected as malware

I was wondering... if antiviruses store virus definition files that contain virus signatures then why wouldn't they get detected as malware by themselves or Windows Defender or any other AV out there?
-2
votes
1answer
294 views

How can malware remain on the Google Play store?

How could an app that is malware be on the Google Play store? I found a Bible app "Bible Home" (which exhibits malware like behavior) available for Android on the Play Store. However, ...
2
votes
2answers
708 views

Is factory reset enough to remove malware from laptop?

I have an ASUS laptop with Windows 10 that I want to factory reset. I used it for many years and did some torrenting with it in the past, so I wouldn't be surprised if something went wrong when it ...
0
votes
1answer
86 views

Is https://div.show/options fraud/malware? [closed]

Is https://div.show/options fraud/malware? I saw via https://app.uriports.com that a customer tried to load the page mentioned before and it was blocked thanks to CSP.
0
votes
1answer
658 views

How to detect malware in images

Do commercial AV suites examine image files (pictures) for potential malware that might be imbedded via steganography? Is this a concern for most? I deal with a lot of imagery data and am wondering ...
0
votes
2answers
267 views

Is it impossible to have a PDF file execute a command without abusing any exploits?

We are running a purple team which includes attempting to run a malicious PDF on the target system. The targeted user is well aware of the exercise so there is no concerns about an AV picking the ...
0
votes
1answer
160 views

Lateral movement while on VPN [closed]

Now that everyone is working from home using VPN, if infected by any malware, is lateral movement possible?
3
votes
1answer
465 views

Why aren't Microsoft Office macros sandboxed?

For about 20+ years now, Microsoft Office macros have been used to spread malware. Even in recent years those threats have not disappeared and they often resurface in one form or another e.g. World’s ...
2
votes
1answer
126 views

How to "break" remote access on Windows and rooted Android?

Let's say you want to "break" all remote access capabilities on your rooted Android phone and your Windows PC. What do you do or delete so remote access is truly broken and can't be used (by ...
0
votes
2answers
242 views

How to close or block remote access backdoors?

I've been reading about famous hacking groups targeting law firms, corporations and individuals. They always use remote access backdoors to get into a victim's computer or phone and lock the system ...
2
votes
0answers
356 views

How do EDR prevent you from uninstalling even as local admin?

I have an CrowdStrike EDR and it seems like the only way to disable this on all OS is to provide maintenance-token or ask CrowdStrike to disable the defences so you can uninstall it. I also have a ...
0
votes
1answer
419 views

Getting AVAST alert during program update/upgrade in Kali Linux

So i started to use VirtualBox in windows 10 and i would like to know if those alert from my windows 10 security program (avast antivirus), during my installation/upgrading of TheHarvester program at ...
0
votes
0answers
27 views

There's a virus in my explrorer.exe file in local disk C [duplicate]

I have a virus in my explorer.exe file. Because of that virus the desktop screen gets black sometimes. Then i have to open task manager, browse the explorer.exe file and open it. This solves the ...
0
votes
1answer
129 views

Is it safe to extract file from potentially infected disk

I have a hard drive used for years, there are windows and many personal files on it. What I called "files" are images, musics, documents (pdf or docx), but not programs. All the "files&...
2
votes
0answers
156 views

Using other programming languages for malware against EDR?

As an example, one of the most basic malware to inject into a process to get a C2 beacon goes like this: Get Handle of a process -> VirtualAllocEx -> WriteProcessMemory -> CreateRemoteThread ...
0
votes
0answers
52 views

my friend stolen my imei number using this he can get my phone persona data? [duplicate]

He stolen my imei number and even he knows my phone number. Using this can he get my any information such as call details, whats app messages and other phone activity???
0
votes
2answers
152 views

whats the worst thing an Android malware is capable of doing?

An android malware can do a lot of damage, whats the absolute worst thing it can do ? Consider a layman's Android device which is not rooted.
3
votes
2answers
457 views

Can a web page really log keystrokes on a different page shown later on the same tab (or a different tab)?

According to this Reddit comment, an advertisement on one page seems to be able to log a user's keystrokes on a different page (if I understand the comment correctly). Is this really true? Can an ...
0
votes
2answers
193 views

What does the bizarre text mean at VirusTotal?

I downloaded Bitcoin Core from here: https://bitcoin.org/bin/bitcoin-core-0.20.0/bitcoin-0.20.0-win64-setup.exe I then uploaded it to VirusTotal: https://www.virustotal.com/gui/file/...
-2
votes
1answer
2k views

How am I supposed to interpret a VirusTotal result of "some engines think this is malware"? [closed]

I just scanned another installer/EXE with VirusTotal. I've come to depend on this crappy service owned by the evil Google, in spite of its ambiguous messages and extremely confusing interface, because ...
-1
votes
1answer
577 views

Can I trust a used motherboard purchased from a seller in China? [duplicate]

The ASUS motherboard in an older PC I own failed. I purchased a replacement from a vendor on eBay, shipped from China (Shenzhen). Only after receiving the motherboard did it occur to me to wonder ...
1
vote
2answers
155 views

Is my email, pc or something else hacked?

Recently I registered iCloud account with my gmail account. Now I received fake email from "iCloud" on mail.com email address which I use frequently for registering accounts on various sites....
3
votes
2answers
3k views

If malware can be attached to an image file, then why aren't images a common attack vector?

For example, if someone uploads a malicious image on website like Instagram or Facebook, and then hundreds of people viewed this image, wouldn't that be an easy way to infect the devices of hundreds ...
0
votes
1answer
96 views

Is there any chance of local PC getting infected when you analyse PCAP malware file on a cloud server through putty?

Is there any chance of my local PC getting infected when I analyse PCAP malware file on a cloud server through putty? I want to run pcap malware to test snort in my cloud server. I want to know on ...
3
votes
0answers
128 views

First Known Client/Server Architecture Malware

What malware was the first to use a client-server architecture to relay commands? The earliest that I could find appears to be NetBus which was written in early 1998. The next closest would be Back ...
0
votes
1answer
148 views

How can I check if there is malware on my router?

What checks should I perform to ensure my router is malware free? This is for a home network
0
votes
1answer
203 views

VirtualBox setup - running potential virus [duplicate]

Is my VirtualBox setup fine for running a potential virus/malware? Here's the screenshot of my settings - CLICK Shared clipboard and drag n drop are off. Let me know if anything else is required.
2
votes
1answer
2k views

Possible Malicious Linux.Xor.DDoS installed

I am not an expert in information security. I am running Lubuntu on a laptop. Today, I ran chkrootkit and it printed the following: INFECTED: Possible Malicious Linux.Xor.DDoS installed /tmp/clamav-...
1
vote
0answers
147 views

Explanation for maldetect advice

I received a notice from maldetect on an Apache machine I'm running, and I've not seen an advice like this before. I'd like to get a better understanding of exactly what I am looking at. I received ...
3
votes
3answers
417 views

How to make sure that no one is watching you through webcam?

I have heard that intelligence agencies and hackers can illicitly gain access to a computer's webcam and microphone and keep a close eye on people using suspicious programs or malware. Is there any ...
0
votes
3answers
240 views

Checking potentially infected photos for stegonography

A friend of mine has an old family PC with a bunch of important photos on it. Unfortunately, from what he told me, it seems like they have fallen victim to a tech support scam some five years ago, ...
1
vote
1answer
202 views

Izito and similar sites keeps appearing in my search results [closed]

Izito and similar sites keep appearing on my search engine results. It started a few weeks ago. It has been happening on both - my Ubuntu and Windows computer, and even on a new Windows computer. It ...
1
vote
1answer
156 views

What evidence does a compiled file leave behind?

I was wondering when people compile malware and use the compiled files for engagements or nefarious purposes, what evidence do they leave behind in the compiled Windows executables? I have heard that ...
7
votes
4answers
7k views

Where can I find an engineer who can examine an exe and verify its legitimacy? [closed]

We have an exe file that our members have been using. It was submitted to VirusTotal and it returned one red flag: How can we have the app evaluated by a 3rd party software engineer? And how likely ...
-3
votes
1answer
119 views

Is ip address in a Payload detectable? [closed]

If I generate a payload with my IP address and it got detected by the user will my IP exposed?
1
vote
0answers
57 views

Best practices for checking security risks on used devices [closed]

If you are buying used device, laptop or game console, or a smartphone - what are the best practices for checking it’s security? How to check if device’s HW wasn’t modified or it is not coming with ...
0
votes
0answers
61 views

Is it possible to infect a wired headset with any kind of malware? [duplicate]

I got a HyperX Cloud Stinger headset, wired and 3.5mm connector. Is it possible to infect my headset with some kind of malware? If my headset is infected with any kind of malware, it would transfer ...
2
votes
1answer
4k views

I accidentally downloaded a .bin file, should I be worried?

I accidentally downloaded a .bin file on my computer, but I didn't click on it or open it. I did use my virus scanner to scan it (result: no threats) and then deleted it. I've read somewhere that .bin ...

1
3 4
5
6 7
47