News for hackers. Stuff that matters.

A comment on Copies of malware used by intelligence agencies to spy on journalists. Parent comment

Re:Copies of malware used by intelligence agencies to spy on... by gasull on Monday September 15, 2014 @02:11AM (#8317505)
It will phone home. Don't do it unless it's disconnected from the network. It might also try to spread the infection through other attack vectors, like bluetooth, or trying to break out of the VM.
[ Parent | on HN ]
Re:Copies of malware used by intelligence agencies to spy on... by wcummings on Monday September 15, 2014 @02:06PM (#8320358)
More likely it would self-destruct to avoid analysis or detection, this is well documented behavior of a number of more sophisticated pieces of malware.
[ Parent | on HN ]
Re:Copies of malware used by intelligence agencies to spy on... by kordless on Monday September 15, 2014 @02:57AM (#8317591)
> break out of the VM

I wonder if this has happened yet?

[ Parent | on HN ]
Re:Copies of malware used by intelligence agencies to spy on... by sp0rk on Monday September 15, 2014 @03:32AM (#8317660)
Most definitely. Here is an example: http://1337day.com/exploit/22519
[ Parent | on HN ]
Re:Copies of malware used by intelligence agencies to spy on... by Dylan16807 on Monday September 15, 2014 @03:44AM (#8317692)
Got anything that doesn't involve the 2d/3d video acceleration? Those are a rather obvious and off-by-default attack surface.
[ Parent | on HN ]
Re:Copies of malware used by intelligence agencies to spy on... by justincormack on Monday September 15, 2014 @05:58AM (#8318008)
See here http://www.vupen.com/blog/20120904.Advanced_Exploitation_of_...
[ Parent | on HN ]
Re:Copies of malware used by intelligence agencies to spy on... by gasull on Monday September 15, 2014 @11:12AM (#8319358)
Down for me. Here's a cached version:

https://web.archive.org/web/20140703130707/www.vupen.com/blo...

[ Parent | on HN ]