Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #80347

Re: Python has arrived!

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Nov 6, 2014 10:47 PM, "Sturla Molden" <sturla.molden@gmail.com> wrote:
>
> Grant Edwards <invalid@invalid.invalid> wrote:
> > According to
> >
http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots
:
> >
> >   "Attacks occur in two phases. Hackers first infect a targeted
> >    machine via simple malware that installs Python onto the device,
> >    [...]"
> >
>
> A virus that runs on Python. It had to happen sooner or later.

It's not a Python virus. The infection vector can be anything. The
interesting part is that they're using browser automation to open a
real-time, encrypted, virtually undetectable and untraceable channel to the
malware over a port (443) that is frequently used and very rarely blocked,
via a host (gmail.com) that is also frequently used and rarely blocked (and
there would likely be plenty of alternatives to choose from if it were),
and without needing to create any sort of server on the target machine. The
fact that Python is involved is incidental.

Back to comp.lang.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Python has arrived! Grant Edwards <invalid@invalid.invalid> - 2014-11-06 15:22 +0000
  Re: Python has arrived! Sturla Molden <sturla.molden@gmail.com> - 2014-11-07 03:45 +0000
  Re: Python has arrived! Ian Kelly <ian.g.kelly@gmail.com> - 2014-11-06 21:43 -0700
  Re: Python has arrived! Steve Hayes <hayesstw@telkomsa.net> - 2014-11-07 06:54 +0200
    Re: Python has arrived! Heinz Schmitz <HeinzSchmitz@gmx.net> - 2014-11-07 10:10 +0100
    Re: Python has arrived! Gregory Ewing <greg.ewing@canterbury.ac.nz> - 2014-11-07 22:15 +1300

csiph-web