Questions tagged [system-compromise]

Dealing with a system compromise: your defenses failed, now what?

15 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
1answer
190 views

Decrypting possibly compromised Veracrypt hard drive

I have a Veracrypt encrypted hard drive, a system drive encryption with the operating system. The laptop is possibly compromised, which is why I can't decrypt it directly on the laptop I don't know ...
2
votes
0answers
56 views

Empire listener compromised?

I've been messing around with Empire powershell post exploitation toolkit for a little while now. I've been "infecting" my home PC with a malicious payload and trying to gain persistence/admin access, ...
1
vote
0answers
61 views

Help in understnading HIDS OSSEC traces

I realized my system Ubuntu and windows dual boot might have been compromised. So, I installed OSSEC HIDS to try to look for issues. When I ran dmesg, i found the following trace: ------------[ cut ...
1
vote
0answers
109 views

Firefox directs me to strange chinese error page, is my security compromised?

Today I was working on a project on my localhost ( I'm a web developer ), when I noticed Firefox is showing a message that means I need to login to my ISP before I can start browsing ( The ...
1
vote
0answers
203 views

security breach: php file edited on codeigniter site, ubuntu server

I run a file sharing site, built on Codeigniter, PHP 7. We recently found one of the files in our www/application/controllers dir was very slightly edited to change a download request for 1 in every 3 ...
1
vote
0answers
962 views

D-Link DIR-655 router compromised?

I'm trying to secure the home router (DIR-655 h/w version B1) of a family member and want to make sure it isn't already compromised. I installed it for them a few years ago but then didn't have access ...
1
vote
0answers
43 views

Protection against remote system compromise on binary code level

My (certainly incomplete) understanding of a remote system compromise on the binary code level is roughly: A program vulnerability, such as missing input validation, is exploited to insert external ...
1
vote
0answers
477 views

How to know if I have been infected with trojan horse through Fritz Box exploit?

This is my first post on here, and the first time I put serious thoughts into network security. I think I have an serious security issue in my network. It seems like someone somehow injected a ...
0
votes
0answers
117 views

Logged in with a hacker's email address

I have an active account at ebay-kleinanzeigen.de (like Craigslist in the US). Today I got a valid email from them that my email address was changed. On my mac, I opened up my ebay-kleinanzeigen ...
0
votes
0answers
83 views

What authentication systems have been involved in data breaches?

Recently, a Federal Judge ordered Marriott to reveal the forensics report for its data breach. I know the Courts have sided with businesses in the past to keep the forensic details of breaches from ...
0
votes
0answers
72 views

What should I do next on my GPG key after my computer is seized by authority?

Unfortunately, although my keys are protected by password, I am afraid it is not strong enough. I assume I lost control of all my private keys now. I still have backup of my private keys, what I want ...
0
votes
2answers
98 views

Differences between compromised shared hosting and dedicated/virtual hosting

My webspace has been compromised as explained on this answered question. While looking for advice on other q&a it seems to me in the answers it is assumed the compromised system is a full ...
0
votes
0answers
55 views

Phoenix/Samsung BIOS/HDD security

I have a laptop bought in 2011. I want to protect its BIOS and HDD (data is already encrypted anyway). But I have seen these vulnerabilities: After 3 incorrect tries, I see "System Disabled" with ...
0
votes
0answers
48 views

Deny/Identify compromised machine sending information to a server?

i was wondering - consider i have 2 machines - client and server. the Client is opened to the internet, and sends very sensitive data to the server. If fake data will be sent to the server and is ...
-1
votes
2answers
144 views

Is it a good idea to have a new laptop just to generate 2FA keys?

I am very concerned about people putting keyloggers or trojans on my computer. That can happen because I use my computers for many things. Work. Playing games. Watching movies. Accessing many ...