New answers tagged

-1 votes

How easy is it to inject malware into websites?

What you're describing is a very implausible scenario: Hacking a single website takes a considerable amount of expertise and money OK, you've done that, for how long do you think this website will be ...
1 vote

How easy is it to inject malware into websites?

There is no defined scale for "easy" or "hard" inject malware into a website. But for most sites one can probably say that it is possible if the attacker is willing to spend enough ...
1 vote

Can flash drive infect Android and then the Android infect Windows PC?

Theoretically? Yes. Practically? No Such usb stick would have needed to persistently infect the Android phone (without requesting access, so likely through some kind of exploit to an Android ARM) in ...
  • 18.2k
0 votes

Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?

My recommended keys to visiting untrusted or known malicious websites know that nothing you do will perfectly protect you Use Tor on full safety settings this is for anonymity, not security to a ...
1 vote

Can malware spread through HDMI, Display Port or USB

USB Yes USB is known to be dangerous [1], for a long time already - just think of the Windows Autorun-Feature combined with e.g. USB sticks. There are numerous attacks possible [2] using USB as a ...
  • 11
1 vote

What allows for reinfection of the same PUP after quarantine and removal?

Related question: Can Chrome sync be infected? It sounds like the user is signed in to Chrome sync, which by default syncs extensions. Having an unwanted extension keep installing itself via the ...
1 vote
Accepted

How to protect digital evidence against deletion when confronted with a motivated state actor

What about the good old DVD? Might have gone out of fashion nowadays but is has more than enough space to hold 2GB of data and it is downright impossible to delete data from it without physical access ...
  • 418
0 votes

How to protect digital evidence against deletion when confronted with a motivated state actor

Answering my own question as a starting point Buy a new laptop, 4 flash drives Find a computer technician and request to create a new bootable drive from one of the flash drives For the following ...
0 votes

C++ standard library use in malware

Also I might think of it being a way to obfuscate code in order to by pass detection. If an antivirus has the use of standard libraries used in such a way as a trigger for malicious code then they may ...
4 votes
Accepted

Malware prevention of data received in a POST endpoint

What's the risk? For example, someone can send data in a form of html (like above example) and also set it's name as a html file with file extension. If then you request that data, the file is ...
  • 42.1k
1 vote

Malware prevention of data received in a POST endpoint

how can you check a string with all the different possible dangers? You can't because: that would mean you have a perfect AV product (which hasn't happened yet, all AV products have false negatives)....
  • 56
2 votes

Does attaching malware or virus in an email count as Phishing attack

The term "phishing" is used in two senses. The tighter definition is that it must involve automated collection of credentials. This typically involves a form pretending to be a legitimate ...
  • 10.1k
3 votes

Does attaching malware or virus in an email count as Phishing attack

Yes and no. In practice, yes, this is considered "phishing" even though it does not satisfy the strict definition. Only because there are no other better terms. "Phishing" now ...
  • 125k
0 votes

What's the point of Empire if all payloads get flagged?

True, Empire's stock stagers have been signature'd by most if not all AV/EDR companies, but dosen't make Empire anyless powerful. Getting a stock stager to execute is only difficult if you have not ...
  • 13
1 vote
Accepted

Can my infected phone’s hotspot infect my outdated computer?

I’m not a random target, the hacker knows me and is targeting me. The hacker is advanced, with many years of knowledge and experience. Yes. A hacker targeting specifically someone with an outdated ...
  • 51.8k
1 vote

Why aren't Microsoft Office macros sandboxed?

Microsoft now have native Windows Sandbox for this.

Top 50 recent answers are included