4 ms·
>“He was instructed that the embedded image contained a cyber-tool known as a ‘splunk’ tool,’ which can allow the originator full access to his computer, and al
by rebuilder 7y ago
>“He was instructed that the embedded image contained a cyber-tool known as a ‘splunk’ tool,’ which can allow the originator full access to his computer, and all the files on the computer,”
It seems the journalist here believes some tool much more powerful than a tracking pixel may have been used. I've never heard of a "splunk tool" and frankly it seems like BS, but if the journalist believes this then the tone of the article is explained.
- TrueDuality 7y agoFrom the technical perspective of how emails work and the limited subset of HTML being available inside them. I think this is a case of crying wolf without understanding technical capabilities. The only way the access described there is even remotely possible is using a vulnerability in a systems image parser or network client stack (using only the URL and server response). Burning an unknown 0-day vulnerability with that level of power wouldn't be wasted on even a high profile military court case.
- harimau777 7y agoDoes Splunk (https://en.m.wikipedia.org/wiki/Splunk https://en.m.wikipedia.org/wiki/Splunk) do anything with tracking emails? Perhaps that's what they meant?
- dillondoyle 7y agoThis stood out to me too. Maybe there is some image breakout vuln that is exploited, which would be HUGE. I would think there'd be a wider attack surface to attach a PDF though...