Hackers Make $5M a Day by Faking 300M Video Views

Re:Hackers Make $5M a Day by Faking 300M Video Views by japaw on Tuesday December 20, 2016 @04:00PM (#13223909)

> The part that confused me is when they claim to have obtained MethBot source code, but never mention how.

On page 19 in the The Methbot Operation report they state that ‘White Ops detection technology was able to use a JavaScript language feature called “reflection” to gather extensive, detailed information about its inner workings.’

I have personally never heard about JavaScript reflection before, but it appear to be a debug method for one object to dump information or data about another object.

Maybe the White Ops software loaded some JavaScript that was able to dump much of its environment and send it back to White Ops?

[ Parent | on HN ]

Re:Hackers Make $5M a Day by Faking 300M Video Views by untog on Tuesday December 20, 2016 @10:56PM (#13226677)

I don't know more than anyone else about this particular situation, but I can imagine how JS reflection works. Something like:

    let test = function() { return "hello";}
    test.toString()

returns

    "function() { return "hello";}"

It's not too difficult to imagine that pairing that with some JS parsing would allow you to slowly crawl your way around an app and gather the app structure. Crazy, and fascinating idea.

[ Parent | on HN ]

Re:Hackers Make $5M a Day by Faking 300M Video Views by geocar on Wednesday December 21, 2016 @04:05AM (#13227778)

If WhiteOps did that, they didn't need to. A nodejs vm escape was sufficient to get process.mainModule.require and from there, it's game over.

[ Parent | on HN ]