3 ms·
> This means that if you can save a malicious DLL next to that executable you can make a perfectly legitimate executable run malicious code. Some people instal
by inetknght 6y ago
> This means that if you can save a malicious DLL next to that executable you can make a perfectly legitimate executable run malicious code.
Some people install browsers onto a USB drive -- or even run a browser directly from their Downloads directory. Such people are easy targets for this type of thing.
- cromwellian 6y agoIf you look at the way most scammers work, it's even simpler than that. They simply phish people by sending them a link and telling them to run it for some reason (it'll fix their computer, it's a required security update, etc) or they tell them to install something like TeamViewer so they can help them eliminate security flaws, and call center scammers then pillage their box. I'm amazed the the number of people still forwarding chain letters to me in Facebook, so who knows how many people fall for the "pass this Javascript into your browser console" trick.
- saagarjha 6y agoRunning a browser from the downloads directory is unlikely to work correctly on macOS.
- imwillofficial 6y agoIt’s funny you say this, because I did exactly this yesterday. I downloaded chromium and forgot I had not yet dragged it to my applications folder and I was running it for a few hours out of my downloads folder.
- saagarjha 6y agoGoogle Chrome ships in a DMG, doesn’t it? This means that if it is running out if your downloads folder, it’s not subject to the things that would mess it up because you dragged it there.
- merlinscholz 6y agoI think Chromium does get shipped as a normal executable, it's only Chrome which gets released as DMG.
- im3w1l 6y agoInstallers would be the most common I think.