How I Hacked a Router

Re:How I Hacked a Router by svas on Saturday April 05, 2014 @11:40PM (#7539589)

Curious how the author knew to seed the backdoor'ed Notepad++ before Bill clicked the link?

I suppose you could just serve up a fake backdoor program for every *.exe\msi download, and remove the honeypot on the second download? The first download would execute and maybe do nothing (or error) - prompting a second download which led to the real thing.

[ Parent | on HN ]

Re:How I Hacked a Router by lambda on Sunday April 06, 2014 @02:43AM (#7540060)

In the article, he mentions using Evilgrade to do the backdooring. If you click though the link, you can find the README, which lists a bunch of applications that Evilgrade supports seeding backdoored versions of http://www.infobyte.com.ar/down/isr-evilgrade-Readme.txt

He likely just enabled them all, or at least enabled several which are likely candidates for his target to download.

[ Parent | on HN ]

Re:How I Hacked a Router by stedaniels on Sunday April 06, 2014 @01:17AM (#7539871)

Notepad++ checks a known URL for updates. He'll have spoofed the URL to tell Notepad++ that there was an update, his.

[ Parent | on HN ]

Re:How I Hacked a Router by moyix on Sunday April 06, 2014 @01:03AM (#7539834)

It probably just backdoors any executable it sees on the fly.

[ Parent | on HN ]