3 ms·
> it is very common for malware to use ICMP for C&C. This is not true in the slightest. And it'd only be realistic on windows as all other prevalent platforms
by ryanlol 11y ago
> it is very common for malware to use ICMP for C&C.
This is not true in the slightest.
And it'd only be realistic on windows as all other prevalent platforms require administrative privileges for such.
- dkopi 11y agoGood thing malware doesn't have administrative privileges.
- ryanlol 11y agoUnless you're a member of ac1db1tch3z and happen to be sitting on a particularly big pile of local 0days, as a malware developer you wouldn't rely on having such privileges. Lets be real here, ICMP is a particularly bad protocol for malware and that's why nobody uses it.