Full Disclosure mailing list archives

RE: [inbox] malware added in transit


From: "Curt Purdy" <purdy () tecman com>
Date: Thu, 18 Mar 2004 07:50:24 -0600

Paul  wrote:

Hi all, perhaps I'm way off-base but I've been under the impression that
malware can be added
 to clean transmissions as they pass through infected nodes.  Is this
possible?

 Unless you're talking about inserting a proxy in-line and manually grabbing
the packets and manipulating them at a huge amount of work, you ARE way
off-base.  There is no malware I know of that would even know what the
packets were, muchless re-assemble them into the original document, insert
itself, and pass it on.  Maybe by 2104...

Curt Purdy CISSP, GSEC, MCSE+I, CNE, CCDA
Information Security Engineer
DP Solutions

----------------------------------------

If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- White House cybersecurity adviser Richard Clarke

Current thread: