Re:HiddenWasp Malware Stings Targeted Linux Systems
by jorangreef on Friday May 31, 2019 @06:09AM
(#20059585)
Yes, but then again warning dialogs don't have much track record in preventing malware outbreaks.
For example, recent versions of Word won't run VBA macros by default without the user clicking through a warning dialog, and yet people fall for it all the time.
Malware authors don't mind either way.
Re:HiddenWasp Malware Stings Targeted Linux Systems
by skrebbel on Friday May 31, 2019 @06:18AM
(#20059613)
I didn't say anything about that. I'm only refuting the claim that Windows email clients will run an executable just by clicking on them.
Re:HiddenWasp Malware Stings Targeted Linux Systems
by jorangreef on Friday May 31, 2019 @06:35AM
(#20059697)
Well, then I would disagree with you there. There are plenty of ways to get Windows to run executable code just by clicking an attachment, and this even without warning dialogs:
- PDFs with JS code. It's not a joke, someone actually titled a paper on PDF exploits alone, "PDF, Let Me Count the Ways".
- Hostile RTFs (with or without OLEs) disguised as Word documents (which Office will gladly open).
- Hostile HTML disguised as Excel spreadsheets (likewise).
- New unknown variants of the old Windows metafile exploit (just by viewing, as xorcist suggested).
- Image "stegosploits" (likewise).
The list goes on...
Which email client is that?
Also, for many years already, Windows won't let you run an executable that you just downloaded from the internet just by double clicking, without first clicking through a warning dialog.