3 ms·

While incredibly cool... wouldn't you have to have physically accessed and exploited the system for this type of attack? I'm not sure what kind of practical im

While incredibly cool... wouldn't you have to have physically accessed and exploited the system for this type of attack? I'm not sure what kind of practical implementation this could really have.

deleted 4y ago
[deleted]
babypuncher 4y ago
Gain physical access to a machine, install malware that gathers data and transmits it using this vulnerability. Only works if you can set up a listening post within range of the PC. Certainly very limited utility, and definitely not something any of us should actually be worried about. But it probably is something to be aware of if you run IT for an embassy or any other entity that could be targeted by a highly motivated state sponsored actor.
detaro 4y ago
That's what "exfiltration" generally means, yes
lallysingh 4y ago
You don't need physical access, but you can't do it via Internet. An intercepted/faked software CD/USB would probably be a good vector. They have to install software somehow.
PeterisP 4y ago
There are various ways how you can push in malware to isolated systems (compromised USB drives used to be common, and still seem to work in some penetration tests; but in general, you might succeed in getting someone to deliver a malicious document file to such a system with some zero-day in it. Also, compromised hardware - e.g. ship them a USB mouse that 12 hours after plugging in technically becomes also a USB storage device and a USB keyboard to send commands to install stuff), but then you have the trouble of what that malware should do once on those systems - being able to establish a communications channel is useful in such a scenario. So there's definitely a role for such tools, only these scenarios are relevant only to quite expensive targeted attacks, essentially spycraft by state actors, not for e.g. commercial ransomware operators.

3 ms·

While incredibly cool... wouldn't you have to have physically accessed and exploited the system for this type of attack? I'm not sure what kind of practical im

by tracker1 4y ago

While incredibly cool... wouldn't you have to have physically accessed and exploited the system for this type of attack? I'm not sure what kind of practical implementation this could really have.

deleted 4y ago
[deleted]
babypuncher 4y ago
Gain physical access to a machine, install malware that gathers data and transmits it using this vulnerability. Only works if you can set up a listening post within range of the PC. Certainly very limited utility, and definitely not something any of us should actually be worried about. But it probably is something to be aware of if you run IT for an embassy or any other entity that could be targeted by a highly motivated state sponsored actor.
detaro 4y ago
That's what "exfiltration" generally means, yes
lallysingh 4y ago
You don't need physical access, but you can't do it via Internet. An intercepted/faked software CD/USB would probably be a good vector. They have to install software somehow.
PeterisP 4y ago
There are various ways how you can push in malware to isolated systems (compromised USB drives used to be common, and still seem to work in some penetration tests; but in general, you might succeed in getting someone to deliver a malicious document file to such a system with some zero-day in it. Also, compromised hardware - e.g. ship them a USB mouse that 12 hours after plugging in technically becomes also a USB storage device and a USB keyboard to send commands to install stuff), but then you have the trouble of what that malware should do once on those systems - being able to establish a communications channel is useful in such a scenario. So there's definitely a role for such tools, only these scenarios are relevant only to quite expensive targeted attacks, essentially spycraft by state actors, not for e.g. commercial ransomware operators.