Home page logo

fulldisclosure logo Full Disclosure mailing list archives

RE: malware added in transit
From: "Yoanne LE MERCIER" <yoanne.lemercier () acctys com>
Date: Thu, 18 Mar 2004 15:06:38 +0100

Hi list.

It's surely possible, but I'm not aware of anything doing so at this time
(i'd be interested to see)
This kind of malware would be quite specific to be traffic aware (HTTP
down/upload, FTP, Net shares...),
to be able to understand file transfers negociations and act at the right
And a one-shot* "real-time" file transfer infection can be seriously
depending on the protocol being hikacked, packet sizes, multiple files being
transferred (?),
network problems and much more ...

(*) "one-shot" meaning you dont reset any connection side, which would be
the most stealthy method.

 -----Message d'origine-----
De : full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com]De la part de Paul
Envoyé : jeudi 18 mars 2004 13:58
À : full-disclosure () lists netsys com
Objet : [Full-Disclosure] malware added in transit

Hi all, perhaps I'm way off-base but I've been under the impression that
malware can be added to clean transmissions as they pass through infected
nodes.  Is this possible?

Find local movie times and trailers on Yahoo! Movies.

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]