[donotask]

anybody here know about stegosploit? i discoverd it talking to a irl friend that uses this to spread.
its the process of embedding an exe in pixeles of a jpeg or png image, it is used for spreading. victim opens image and exe is downloaded and executed.
also it can be a url where the victims visits and just opens the web page and gets infectes, cybersecurity blogs talk about embedding exe s in ads through stegosploit.
im interested in knowing more about this.
also my irl friend talked to me about rootkits, he spreads those with stegosploit, he says its almost impossible to remove because it goes "between the bios and the os". he says with a rootkit you have access to the whole computer. if its like this, why arent rootkist used to spread? could someone steal bots from sellers if he installs rootkits on every bot he buys? every time the stub gets detected/botkilled he would still have access to the pc with the rootkit? or am i missing somehting?

[Condescend]

Visit a website and automatically download, run, and get infected? Yeah... I don't think so.

Unless you're running on an earlier version of Windows, getting applications to autorun without the user invoking it isn't possible, as far as I know. If this were possible, every single fake website with auto-downloads would take advantage of it.

Rootkits can be placed in multiple places of the OS. It depends on the technique of the creator. They can be detected, but it can be pretty weird detecting them. They are also much more difficult to create, due to them being so much more advanced than other malware; and, most of the time, they take advantage of system vulnerabilities to gain more administrative access, so that makes them even harder to construct.

[donotask]

Visit a website and automatically download, run, and get infected? Yeah... I don't think so.

Unless you're running on an earlier version of Windows, getting applications to autorun without the user invoking it isn't possible, as far as I know. If this were possible, every single fake website with auto-downloads would take advantage of it.

Rootkits can be placed in multiple places of the OS. It depends on the technique of the creator. They can be detected, but it can be pretty weird detecting them. They are also much more difficult to create, due to them being so much more advanced than other malware; and, most of the time, they take advantage of system vulnerabilities to gain more administrative access, so that makes them even harder to construct.

but could a rootkit download and execute a exe on a pc?
also check here about stegosploit and malvertising: htt p s : / / theha ckernews.com/ 2016/ 12/ima ge- exp loit-hac king .htm l is this possible?

[Condescend]

but could a rootkit download and execute a exe on a pc?
also check here about stegosploit and malvertising: htt p s : / /  theha ckernews.com/     2016/ 12/ima ge- exp loit-hac king .htm l    is this possible?

A rootkit usually has full administrative privileges, so yes; it could run an application at its will. I've never heard of malvertising.

[Boolean type]

OP you are missing common sense also your friend is an idiot or retarded skid. Sorry i had to say that.

honestly never seen more bullshit in one thread.

[donotask]

OP you are missing common sense also your friend is an idiot or retarded skid. Sorry i had to say that.

honestly never seen more bullshit in one thread.

ok, but why?

[Clarence]

Visit a website and automatically download, run, and get infected? Yeah... I don't think so.

Isn't that like the way an exploit kit works though? I may be wrong

[Justanotheralias]

OP you are missing common sense also your friend is an idiot or retarded skid. Sorry i had to say that.

honestly never seen more bullshit in one thread.

Thank you, I saved 2 minutes typing that.

[Condescend]

Isn't that like the way an exploit kit works though? I may be wrong

Exploit kits take advantage of vulnerabilities in browsers, and the system and its applications in of itself. Years ago, autorunning downloaded executables was much more common, due to these kits, but due to them being so difficult to create, and the frequency of patches of software, they are not nearly as common.

That's why I said "unless you are running on an earlier version of Windows," because less updated machines are more vulnerable to exploits.

[inyourmemory]

Exploit kits take advantage of vulnerabilities in browsers, and the system and its applications in of itself. Years ago, autorunning downloaded executables was much more common, due to these kits, but due to them being so difficult to create, and the frequency of patches of software, they are not nearly as common.

That's why I said "unless you are running on an earlier version of Windows," because less updated machines are more vulnerable to exploits.

EKs are the main infection vector (not the RIG shits)