Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 08-21-2011, 21:54
SinaDiR SinaDiR is offline
Family
 
Join Date: Aug 2005
Location: Recycle Bin
Posts: 123
Rept. Given: 14
Rept. Rcvd 34 Times in 22 Posts
Thanks Given: 178
Thanks Rcvd at 227 Times in 63 Posts
SinaDiR Reputation: 34
Malware Using Right to Left Override Unicode

The new generation of bad file name to deceive the user to open an EXE or any extension by showing a txt, pdf or anything else extensions it uses by new virus, worm etc. files...
It caused by using a Unicode character that reveres string...

http://www.f-secure.com/weblog/archives/00002219.html
__________________
UnREal RCE - Persian Crackers
Reply With Quote
  #2  
Old 09-23-2011, 20:16
Gunther
 
Posts: n/a
@SinaDiR: This technique had been around for several yrs actually. In the past, you can even implement it for emails as well.

BR,
[ Gunther ]
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 04:41.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )