3 ms·
Detection would wind up being an arms race, I expect; if you were going to do this, better to replace it with an application that just does the warning, with a
by syntheticnature 11y ago
Detection would wind up being an arms race, I expect; if you were going to do this, better to replace it with an application that just does the warning, with a hint for valid users blindly downloading.
Of course, then there's checking MD5s, etc.
- fsaintjacques 11y agoI would be more evil, I would make a custom version of curl package that randomly corrupt bytes only served to this malware. Let the malware developper have fun debugging this issue.
- werid 11y agoYou would not end up wasting any time of the malware developer, as the article states: "an updated version of the malware comes bundled with the curl library"
- fabulist 11y agoIt would be more like, "let the script kiddies using this tool shrug their shoulders when it stops working and switch to another (of which there are legion)."