3 ms·
It will phone home. Don't do it unless it's disconnected from the network. It might also try to spread the infection through other attack vectors, like blueto
by gasull 12y ago
It will phone home. Don't do it unless it's disconnected from the network. It might also try to spread the infection through other attack vectors, like bluetooth, or trying to break out of the VM.
- kordless 12y ago> break out of the VM I wonder if this has happened yet?
- sp0rk 12y agoMost definitely. Here is an example: http://1337day.com/exploit/22519 http://1337day.com/exploit/22519
- Dylan16807 12y agoGot anything that doesn't involve the 2d/3d video acceleration? Those are a rather obvious and off-by-default attack surface.
- justincormack 12y agoSee here http://www.vupen.com/blog/20120904.Advanced_Exploitation_of_Xen_Sysret_VM_Escape_CVE-2012-0217.php http://www.vupen.com/blog/20120904.Advanced_Exploitation_of_...
- gasull 12y agoDown for me. Here's a cached version: https://web.archive.org/web/20140703130707/www.vupen.com/blog/20120904.Advanced_Exploitation_of_Xen_Sysret_VM_Escape_CVE-2012-0217.php https://web.archive.org/web/20140703130707/www.vupen.com/blo...
- wcummings 12y agoMore likely it would self-destruct to avoid analysis or detection, this is well documented behavior of a number of more sophisticated pieces of malware.