2 ms·
I can't find it now, but there was a VLC CVE report about being able to execute code remotely, with a CCP threat actor using it. VLC said it was due to a fake v
by consumer451 4y ago
I can't find it now, but there was a VLC CVE report about being able to execute code remotely, with a CCP threat actor using it. VLC said it was due to a fake version of VLC being distributed.
Could this all be related to that?
- boomboomsubban 4y agohttps://www.ghacks.net/2022/04/11/symantec-says-that-hackers-distributed-a-modified-version-of-vlc-and-exploited-it-for-malware-attacks/ https://www.ghacks.net/2022/04/11/symantec-says-that-hackers... Maybe related? To my knowledge, India hasn't said anything about why it's banned. And everybody agrees the issue was a modified version of VLC being distributed, the original report put it in a confusing way that made it sound like base VLC was susceptible.
- consumer451 4y agoYes, exactly. My guess was that it was an overreaction/mistake and now admitting that would embarrass people. Especially since banning the real VLC would increase the risk to Indian users by increasing the adoption of the fake VLC.
- jbk 4y agoThis does not match the dates of the ban.
- boomboomsubban 4y agoIt might fit the dates, according to you the site was blocked in February and the malware campaign started late last year. It'd require independent verification from the Indian government, but it'd be possible. I do find it hard to believe India was on top of things enough to catch the malicious version early but stupidly thought the best solution was to block the official version. But it was possible.