3 ms·
Sounds extremely targeted, if an attacker is porting the attack to Macs (presumably a lot of work), and combining it with other loaders... I wonder how long thi
by sterlind 7y ago
Sounds extremely targeted, if an attacker is porting the attack to Macs (presumably a lot of work), and combining it with other loaders... I wonder how long this 0-day was in the wild.
Your friend should probably be browsing as a non-admin in a continuously-reimaged VM, separate from an air-gapped machine, if you have those kinds of attackers after you. Spooky..
- admax88q 7y agoWhat about that makes it sound targeted? Seems like standard vulnerabilities chained together, nothing specific to the "target"
- FDSGSG 7y ago> presumably a lot of work How come?
- fabianhjr 7y agoJust jail outside facing processes like firefox. (BSD Jails, Firejail in Linux and probably another solution on Mac)
- kchr 7y agoJust speculation, but "targeting" in this case may be as trivial as checking the user agent header, or other "device recognition" tricks common in web development nowadays. I am sure there are hundreds of libraries that do this for you...
- saidajigumi 7y agoif an attacker is porting the attack to Macs (presumably a lot of work) It's worth noting that a professional security and pentest company I know of had a Python-based exploit authoring DSL that automatically generated exploit code across a very wide range of processor architectures and OSes. This was about fifteen years ago.
- stcredzero 7y agoIt's worth noting that a professional security and pentest company I know of had a Python-based exploit authoring DSL that automatically generated exploit code across a very wide range of processor architectures and OSes. Makes sense. If entire OSes can be written in an intermediate representation, then exploits can be as well.
- kseifried 7y agoYou mean Core Impact? =).
- saidajigumi 7y agodingdingdingdingding!