News for hackers. Stuff that matters.

A comment on How Cybercriminals Can Abuse Chat Platform APIs as C&C Infrastructures [pdf]. Parent comment

Re:How Cybercriminals Can Abuse Chat Platform APIs as C&C In... by __sha3d2 on Tuesday November 28, 2017 @05:29PM (#15802489)
> (I'd do an invite-only subreddit with a tracking pixel in the CSS)

So that you could nuke it if a not-you IP accessed the subreddit? That's nice and could be very easily automated.

[ Parent | on HN ]
Re:How Cybercriminals Can Abuse Chat Platform APIs as C&C In... by lawl on Wednesday November 29, 2017 @09:32AM (#15807014)
Except it doesn't work because reddit sanitizes their CSS and doesn't allow url() to external hosts. You need to upload the images you want to reference in the CSS to reddit.
[ Parent | on HN ]