Full Disclosure mailing list archives
RE: malware added in transit
From: "Yoanne LE MERCIER" <yoanne.lemercier () acctys com>
Date: Thu, 18 Mar 2004 15:06:38 +0100
Hi list. It's surely possible, but I'm not aware of anything doing so at this time (i'd be interested to see) This kind of malware would be quite specific to be traffic aware (HTTP down/upload, FTP, Net shares...), to be able to understand file transfers negociations and act at the right time... And a one-shot* "real-time" file transfer infection can be seriously "compromised" depending on the protocol being hikacked, packet sizes, multiple files being transferred (?), network problems and much more ... (*) "one-shot" meaning you dont reset any connection side, which would be the most stealthy method. YLM. -----Message d'origine----- De : full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com]De la part de Paul Envoyé : jeudi 18 mars 2004 13:58 À : full-disclosure () lists netsys com Objet : [Full-Disclosure] malware added in transit Hi all, perhaps I'm way off-base but I've been under the impression that malware can be added to clean transmissions as they pass through infected nodes. Is this possible? Find local movie times and trailers on Yahoo! Movies. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- malware added in transit Paul (Mar 18)
- RE: [inbox] malware added in transit Curt Purdy (Mar 18)
- RE: [inbox] malware added in transit Alerta Redsegura (Mar 18)
- Re: [inbox] malware added in transit Valdis . Kletnieks (Mar 18)
- RE: [inbox] malware added in transit Alerta Redsegura (Mar 18)
- Re: [inbox] malware added in transit Valdis . Kletnieks (Mar 18)
- RE: [inbox] malware added in transit Alerta Redsegura (Mar 18)
- RE: [inbox] malware added in transit Curt Purdy (Mar 18)
- <Possible follow-ups>
- Malware added in transit Paul (Mar 18)
- RE: Malware added in transit Stephen Blass (Mar 18)
- Malware added in transit Paul (Mar 19)