News for hackers. Stuff that matters.

A comment on We purchased a machine from China and it came with malware preinstalled. Parent comment

Re:We purchased a machine from China and it came with malwar... by raverbashing on Tuesday January 25, 2022 @09:16AM (#30071994)
Or it's just malware that's "around" the company since nobody cares what they download, which USB keys they plug, etc

Autorun USB malware is very common

[ Parent | on HN ]
Re:We purchased a machine from China and it came with malwar... by fpgaminer on Tuesday January 25, 2022 @03:15PM (#30077428)
> Or it's just malware that's "around" the company since nobody cares what they download, which USB keys they plug

There's a fun story documented on Darknet Diaries (https://darknetdiaries.com/transcript/22/) about a wind farm that got hacked. The "malicious" actor had found his way into their infrastructure and installed some idle cryptominers. But he was also taking the time to maintain all the infrastructure; applying updates and patches on a regular basis in an effort to keep other would-be hackers out. The security consultant discloses all of this to the company. Well, the story ends with the company making a business decision to leave things as they are. They were effectively getting free IT.

[ Parent | on HN ]
Re:We purchased a machine from China and it came with malwar... by gruez on Tuesday January 25, 2022 @10:14AM (#30072666)
>Autorun USB malware is very common

that hasn't worked since windows xp sp2.

[ Parent | on HN ]
Re:We purchased a machine from China and it came with malwar... by raverbashing on Tuesday January 25, 2022 @11:29AM (#30073797)
Doesn't mean machines with malware won't save files to attached USB drives
[ Parent | on HN ]