Re:HiddenWasp Malware Stings Targeted Linux Systems
by jorangreef on Friday May 31, 2019 @06:35AM
(#20059697)
Well, then I would disagree with you there. There are plenty of ways to get Windows to run executable code just by clicking an attachment, and this even without warning dialogs:
- PDFs with JS code. It's not a joke, someone actually titled a paper on PDF exploits alone, "PDF, Let Me Count the Ways".
- Hostile RTFs (with or without OLEs) disguised as Word documents (which Office will gladly open).
- Hostile HTML disguised as Excel spreadsheets (likewise).
- New unknown variants of the old Windows metafile exploit (just by viewing, as xorcist suggested).
- PDFs with JS code. It's not a joke, someone actually titled a paper on PDF exploits alone, "PDF, Let Me Count the Ways".
- Hostile RTFs (with or without OLEs) disguised as Word documents (which Office will gladly open).
- Hostile HTML disguised as Excel spreadsheets (likewise).
- New unknown variants of the old Windows metafile exploit (just by viewing, as xorcist suggested).
- Image "stegosploits" (likewise).
The list goes on...