5
Short answer, how to practically detect Pegasus on your phone: the Mobile Verification Toolkit can (but not always) detect indicators of compromise by Pegasus or other malware. The tool works for both Android and iOS, but the two platforms have different forensic recordkeeping, so results can vary. The authors indicate that iOS keeps more forensic traces ...
2
I think there are two fundamental misunderstandings here (or perhaps two statements of the same misunderstanding):
From this we can derive that web browsers allow remote code access to many if not all functions of the device.
Remote code execution doesn't imply that the application has allowed access, only that it has failed to prevent it in some way. ...
2
While a video file could have been "crafted to exploit a vulnerability in the codec or media player" (from an answer of Polynomial), the video upload features on social media sites typically re-encode the video in a way that would remove such exploits.
Generally social media services provide videos as streams instead of downloads. Twitter does not ...
2
Now yes!
From Ghidra 10.0 change history
New Features
Debugger. Introduced the Debugger, along with GDB and dbgeng.dll connectors for debugging user-mode applications on Linux and Windows, respectively. The UI includes threads, timeline, modules, memory, registers, watches, etc., for examining and controlling debug targets. See Help -> Contents -> ...
1
As a 20-year security professional, I can't think of a more unhelpful email to send to customers. It might as well say: "Look! We found a virus on the Internet!"
Knowing the malware family will do nothing to help you find the device on your network. Intowow is an ad provider and consumer tracker, and this makes sense with the HTTP request of /api/1/...
1
Obfuscated code normally follow two steps:
Assemble the actual code into a string in some extremely convoluted way.
Run it with eval.
All you have to do to deobfuscate it is to replace the eval with console.log so that instead of running it, you just output it. In this case, it turns out to be quite simple, since the eval is right there at the start.
After ...
1
Debuggers are fundamentally ahead in this game. A perfectly written debugger will always be able to perfectly simulate a runtime environment where a perfectly written malware could never detect. Real life debuggers are complicated software that can have many vulnerabilities that may allow a particularly sophisticated malware to detect that it's running in a ...
Only top voted, non community-wiki answers of a minimum length are eligible
