3 ms·

You can send them an image payload with spyware embedded in it

• stdcall83 7y ago
  Tell me more
  • max_ 7y ago
    https://securelist.com/png-embedded-malicious-payload-hidden-in-a-png-file/74297/ https://securelist.com/png-embedded-malicious-payload-hidden...
    • nao360 7y ago
      This is probably really obvious but just in case: be careful you don't break any laws in the process. Would be a shame to land in as much hot water as the perpetrator. Good luck!
  • runjake 7y ago
    Or better yet, just a URL that collects a ton of telemetry. In most cases, their curiousity will win out and you can get browser/platform/ip address details that might help suss out the attacker. I'll do this with a simple PHP page that records everything useful from $_ENV and $_REQUEST. Bonus: it's legal. https://www.php.net/manual/en/reserved.variables.environment.php https://www.php.net/manual/en/reserved.variables.environment... https://www.php.net/phpinfo https://www.php.net/phpinfo