3 ms·
>btw, having the mailware deliverable ia that auto-exec flash exe is really old school, no? I keep seeing this in plots of procedural crime shows where digital
by rudolf0 10y ago
>btw, having the mailware deliverable ia that auto-exec flash exe is really old school, no? I keep seeing this in plots of procedural crime shows where digital savvy techie or detective shoves a newly discovered victim usb into their working computers. Who does that?
This is still a very real exposure and is used by penetration testers all the time. There are several ways to disable USB autorun across a domain, but there are definitely still a lot of big companies that don't prevent it.
- packetslave 10y agoThere are also USB attacks that don't require autorun. See, for example: https://www.blackhat.com/us-14/briefings.html#badusb-on-accessories-that-turn-evil https://www.blackhat.com/us-14/briefings.html#badusb-on-acce...
- adynatos 10y agoif i wasn't running windows, linux or osx on my working computer, i probably wouldn't mind shoving a usb drive into it. security through obscurity.