6 ms·
"Once installed, DOUBLEPULSAR is a stealthy backdoor that’s difficult to detect and continuously relays new information back to its controller." Seems to contr
by c0achmcguirk 9y ago
"Once installed, DOUBLEPULSAR is a stealthy backdoor that’s difficult to detect and continuously relays new information back to its controller."
Seems to contradict itself? If it's continuously relaying information, wouldn't that make it easy to detect?
- TheSpiceIsLife 9y agoIf it's detectable at all doesn't that make it easy to detect?
- chongli 9y agoI think what that means is that it's difficult to detect on the infected host machine. It's easy to detect at the network level, however.
- jessaustin 9y agoDepending on the implementation of "continuously", it might not be easy there either. Most hosts have some reason to be on the internet. Therefore, with some cleverness, attack traffic can be hidden within normal, expected traffic.