4 ms·
I think it's good to remind people that malware happens outside of windows. And yeah it is a single temporary file, and apparently only works on debian based s
by dec0dedab0de 4y ago
I think it's good to remind people that malware happens outside of windows. And yeah it is a single temporary file, and apparently only works on debian based systems and maybe other systems that have wget and cpulimit pre-installed. Doesn't seem like they really tried too hard.
edit:
They could have written the malware in python, and after decoding it run it with eval, done right it would even be cross platform. Now I'm wondering how well i could hide something like this. I gotta stop before I get swept up and start adding easter eggs.
- drdaeman 4y ago> and maybe other systems that have wget and cpulimit pre-installed Nope. It's `apt ... && ...`, and as the left-hand side of `&&` would fail on systems without APT, the right-hand side won't ever run, so it wouldn't work because it wouldn't ever download that `tox` binary.
- dec0dedab0de 4y agoI wasn't sure if redirecting standard error would affect the exit code