Thursday, October 30, 2014

Reflected File Download - A New Web Attack Vector


From my Company's Blog:

On October 2014 as part of my talk at the Black Hat Europe 2014 event, I presented a new web attack vector that enables attackers to gain complete control over a victim’s machine by virtually downloading a file from trusted domains. I decided to call this technique Reflected File Download (RFD), as malware can be "downloaded" from highly trusted domains such as Google.com and Bing.com without ever being uploaded...

The full blog post, including links to the WhitePaper and exploit videos is now available:
http://blog.spiderlabs.com/2014/10/reflected-file-download-the-white-paper.html

128 comments:

  1. Y1 - Play Free Online Y1 Games for everyone. Y1 Games fun to relux. - http://www.sagagames.net/games/y1

    ReplyDelete
  2. Undoubtedly an excellent information and the article as a whole. But I can bet with you)
    Tell me, if such an attack is still the option if you're using a cloud server storage of personal and corporate data virtual data room providers?

    ReplyDelete
  3. File sharing can be defined as the practice of circularizing or allowing access to folders like audio, video, images, computer programs, documents, and electronic books.
    shareit app - the file transferring tool

    ReplyDelete
  4. You have done a great job. I will definitely dig it and personally recommend to my friends. HTTP://KCCATL.COM/ I am confident they will be benefited from this site

    ReplyDelete
  5. I utilized it for a month and saw a discernible distinction in myself. here Presently I don't short of going out with my companions and so forth.

    ReplyDelete
  6. Gscbv#wfhbawhb#46# html:$₩gffhhhh@.com

    ReplyDelete
  7. Upon finding a website that practices an adamant amount of safety you can then commence in the download process without any ailments. http://www.getintopc.co

    ReplyDelete
  8. The driver discs can become problematic as result of several factors. Get Into Pc

    ReplyDelete
  9. Incredible articles and awesome design. Your blog entry merits the greater part of the positive input it"s been getting. Getintopc

    ReplyDelete
  10. Incredible articles and awesome design. Your blog entry merits the greater part
    igg games

    ReplyDelete

  11. Wow Very Nice Information Thanks For Sharing It.
    Getintopc

    ReplyDelete
  12. Nice Information Thanks For Sharing It.Really Thanks
    Getintopc

    ReplyDelete
  13. The driver discs can become problematic as result of several factors.
    filehippo

    ReplyDelete

  14. It was nice unblock game . Very informative and expressive .things are easily play online at
    unblock games

    ReplyDelete

  15. There are millions of people that navigate the internet on a daily basis, precariously venturing around for downloadable software. However, before you engage in downloading any means of software from a site you need to ensure that the site is safe
    http://getintopcsofts.com

    ReplyDelete
  16. Get Here if you want download pc games free you are right now check here ocean of games

    ReplyDelete
  17. It was nice articles . Very informative and expressive .things are easily explained by admin,i was downloaded some days before but I got error while installing , I thing somewhere i made mistake. Now , I find my Fault after this very good readable blog . so I am very Thankful to The Admin and Please Buddy Share your Knowledge Time to Time .
    filehippo
    file hippo
    File hippo
    Download Free PC Software
    File hippo

    ReplyDelete
  18. Hello! Find our premium wordpress templates for any kind of business here https://wordpresstemplates.ch/

    ReplyDelete
  19. No matter how many times I read this, I will never get bored of it.
    ui/ux design

    ReplyDelete
  20. Domain hosting wiki: for bloggers, business owners and webmasters looking for starting, maintaining and knowing more about domains and hosting
    hosting

    ReplyDelete
  21. The webpage should be downloaded as quick as could be expected under the circumstances read more about web design

    ReplyDelete
  22. I can only express a word of thanks! Nothing else. Because with the content on this blog I can add knowledge. Thank you very much has been sharing this information. AvriqAvriq India

    ReplyDelete
  23. My sis would like to provide her wed development services to your great company. She has been working in this field for decades now.

    ReplyDelete
  24. Really this is an effective post from a consultant and thanks for sharing this high-quality information with us. webhosting review

    ReplyDelete
  25. Document offering might be characterized Concerning illustration those act about circularizing or permitting right on folders in audio, video, images, PC programs, documents, Furthermore electronic books.

    ReplyDelete
  26. Simply wish to say your article is as outstanding. The clearness on your submit is just excellent and i can suppose you are an expert on this subject.
    Gurgaon Escort Girls Available Online
    Female Escort in Dwarka

    ReplyDelete
  27. wow, great, I was wondering how to cure acne naturally. and found your site by google, learned a lot, now i’m a bit clear. I’ve bookmark your site and also add rss. keep us updated. Get into pc

    ReplyDelete
  28. simple superb blog presented by the admin... keep on providing such useful stuff thank you..

    ReplyDelete
  29. I've found a very useful website for downloading free software, freeware and shareware. You can download lots of free stuff here.
    Visit softolite and get unlimited free software. You can download windows, graphic design software and ms office from here. Please get in touch and enjoy the free applications .

    ReplyDelete
  30. This comment has been removed by the author.

    ReplyDelete
  31. This comment has been removed by the author.

    ReplyDelete
  32. Wow Very Nice Information Thanks For Sharing It.
    https://www.filehippo.co.com/

    ReplyDelete
  33. Thanks for sharing this interesting blog with us.My pleasure to being here on your blog..I wanna come beck here for new post from your site.
    if you want download fc softwer for free visit www.getinto-pc.co

    ReplyDelete
  34. I am trusting the same best exertion from you later on also. Truth be told your experimental writing abilities has propelled me. website optimisation

    ReplyDelete
  35. Connect your bianance customer support service via Arcler Desk third party site. Dial opur Binance support phone number +1-888-899-4625.

    Binance exchange



    Binance support service

    Bitcoin help support service

    Bitquick Customer service

    Cancoin Support phone number

    Coinbase coin exchange

    ReplyDelete
  36. I love the way you write and share your niche! Very interesting and different! Keep it coming!
    software development company in delhi

    ReplyDelete
  37. AvriqPrinter RepairPrinter InstalltionWifi trouble shooting
    Software InstalltionYou did really good work. I really appreciate your new and different post. Please guys keep it up and share with us some unique post in the future
    Virus removal

    ReplyDelete
  38. AOL Customer Support team will assist or help them to reach the attainable self-governing third-party AOL retriever password support.
    AOL Help and Support
    AOL Customer Service
    AOL Support
    AOL Email Support

    ReplyDelete
  39. Nice!
    HP Printer Support is always ready to help and assist you fix any kind of technical glitches with a joy. For more info, you can visit here
    HP Printer Support

    ReplyDelete
  40. We are direct mandate to providers and facilitators of all types of Bank Guarantee (BG), SBLC for Lease and Purchase. We engage in MTN, PPP programs, MT109, MT799, MT760, Loans, Sale and Lease of Financial Instruments. In addition we have a track record of 100% deliverance rate with the best workable procedures in the Financial Instruments industry. Our providers are very reliable and ready to transact.


    We have an excellent relationship with top rated banks in both Europe and Asia, Stock brokers and financial institutions all over the world. Within a short and transparent transaction period we can provide the SBLC/BG for your Heavy/Light project funding.

    We look forward to your cooperation as we establish a successful business relationship. Anticipating your inquiry

    Email: tekstructuredfinanceltd@gmail. com
    Skype: tekstructuredfinanceltd

    Regards
    David Thomas
    TEK STRUCTURED FINANCE LTD
    BROKERS ARE WELCOME

    ReplyDelete
  41. I have been looking at a couple of your stories and I can state entirely well done. I will bookmark your blog.
    internet marketing

    ReplyDelete
  42. I certainly getting a charge out of each and every piece of it and I havewinderyou bookmarked to look at new stuff you post.
    Edmonton plumber

    ReplyDelete
  43. Thanks for the marvelous posting! I definitely enjoyed reading it, you will be a great author. getintopc

    ReplyDelete
  44. I read this piece of writing fully about the resemblance of newest and previous technologies, it’s remarkable blog.
    Escorts Services in Aerocity
    Escorts Services Near Amblem Hotel

    ReplyDelete
  45. Thank you sooo much for this article. I had the dreadful white screen and your tips saved me .
    life is beautiful

    ReplyDelete
  46. I real like your writing it is very powerful. It touch my soul. 
    Mehandi Ke Design

    ReplyDelete
  47. I like this post,And I guess that they having fun to read this post,they shall take a good site to make a information,thanks for sharing it to me. moviebox apk

    ReplyDelete
  48. We assist our customers through our professional technical guide and provide you the right solution. To avail our professional mail help offerings, call us no longer at our toll-unfastened Aol Customer Service Number and troubleshoot the entire hassle instantly. To understand greater such beneficial recommendation you can go to our web site anytime or deliver us a call on 1-800-329-1530.
    Aol Customer Service Number

    ReplyDelete
  49. These you will then see the most important thing, the application provides you a website a powerful important internet page:
    mason soiza

    ReplyDelete
  50. This comment has been removed by the author.

    ReplyDelete
  51. This comment has been removed by the author.

    ReplyDelete
  52. Binance issues whether complex or easy interrupts the work of users. Users sometimes need proper assistance to cope up with email verification not arriving in Binance account. In such scenarios, users can go for Binance Support and get connected with nimble and proficient geeks who not only give apt guidance but also put all their hard work to get accessible solutions for the users in minimal time. They ensure that users are enjoying their services.

    ReplyDelete
  53. Call us at our Facebook Support Number +1-800-304-9126 at whenever from anyplace, we are accessible 24*7 hours.

    ReplyDelete
  54. Hi
    I am Enjoyful read your blog, I've adored viewing the change and all the diligent work you've put into your lovely home. My most loved was seeing the completed consequences of the stencil divider and the carport. I seek you have a beautiful rest after whatever is left this article. For other information in the future.
    visit for site

    ReplyDelete
  55. Quicken though is a financial software helping customers to manage their tax in a better way, still it is a technical offering which demands a robust and reliable customer support team for its prompt usage.
    Quicken mobile error updating account

    ReplyDelete
  56. We are from Netgear leading online security service from last 5 years if you looking for any security service provider then you are at the right place we will give you the complete assistance about your Security.
    https://www.247arlosupport.com/arlo-base-station-offline

    ReplyDelete
  57. I was looking of your posts on this site page and I consider this site page is truly enlightening ! Keep setting up.
    cheap dissertation Writing Services

    ReplyDelete
  58. You actually make it look so easy with your performance but I find this matter to be actually something which I think I would never comprehend. It seems too complicated and extremely broad for me. I'm looking forward for your next post, I’ll try to get the hang of it! OpenVZ VPS Hosting

    ReplyDelete
  59. The post is written in very a good manner and it contains many useful information for me. Theme

    ReplyDelete
  60. Hi
    It is very nice and so amazing your post and I am enjoying reading your blog, I've adored viewing the change and all the diligent work you've put into your lovely home. My most loved was seeing the completed consequences of the stencil divider and the carport. I seek you have a beautiful rest after whatever is left of 2018, and a glad 2019, companion. Read more…… Facebook Customer Service blog, I am Writing to this blog. I hope you got a lot of help from this blog.

    ReplyDelete
  61. It takes only a few minutes to get the job done. After installation, you should be able to open Quicken by giving double click on the Quicken icon at your desktop, created newly. Quicken Missing Transaction

    ReplyDelete
  62. Our AOL Customer Support can resolve you're all AOL email related issues in just a few minutes and sometimes instantly as they our team have years of experience in handling AOL mail problems.

    ReplyDelete
  63. Quicken support phone number can solve you are all Quicken related problem within a minute.
    Quicken Support Phone Number

    ReplyDelete
  64. You can have the solution to all your HP technical issues with technical support is one stop solution with one place. Just call on our HP customer support phone number.

    ReplyDelete
  65. Nice Blog!!
    Delta Airlines Reservations operates from Atlanta and is one of the popular airlines in the USA. Visit here:
    Delta Airlines Reservations

    ReplyDelete
  66. Nice Blog!!
    Yahoo Support Number is beneficial for most of the corporate users, as they would not have access or do not prefer to waste time by talking over the phone.

    ReplyDelete
  67. You can solve some of these AOL mail system faults or another AOL default just by means of calling at AOL customer service variety. The lines are open 24/7 for the customers, so that you can call us each time you want AOL customer support. Our professionals are usually available to assist the clients to remedy their issues.
    AOL Phone Number

    ReplyDelete
  68. Facebook is a big social website which allows the user to create a profile and share your thoughts, photos, etc. But sometimes Facebook users are facing some technical error regarding the Facebook account. In this case, you can get an instant solution from Facebook Customer Service team.Facebook Help Number
    Facebook Customer Service
    Facebook Phone Number
    Facebook Technical Support
    Facebook Support Number
    Facebook Customer Service
    Facebook Technical Support
    Facebook Phone Number
    Facebook Help Number
    Facebook Customer Service Number

    ReplyDelete
  69. We will assist them with reaching the available self-administering outsider AOL technical support. Dial AOL Support Number

    ReplyDelete
  70. Quicken Support Number can be an incredible help to all clients who are looking for prompt arrangement over basic issues.

    ReplyDelete
  71. In case you are facing any issue related to Quicken So, you can visit our website. Quicken Support Number is a one-stop solution for all your technical issue related to any product. We have a team of highly skilled experts that work 24×7.
    Quicken Support Number

    ReplyDelete

  72. does keto fuel work So, Should You Buy Keto Fuel? Or Are There Better Alternatives?If you want to have natural energy during the day and have a more balanced nutrient intake, then Keto Fuel can be worth the price.Since the goal of the diet is to produce these chemicals anyway, why not take them in a more concentrated form to get all of the benefits faster Through countless hours of research and testing, we found that Keto Fuel is a product that may produce positive results for most people. We have tried it, and countless others have as well.
    http://www.cureidea.com/keto-fuel-diet/

    ReplyDelete
  73. Thanks For sharing this Superb article.I use this Article to show my assignment in college.it is useful For me Great Work. Webdesign

    ReplyDelete
  74. You can create a business page on Facebook because you can get a large number of audience on Facebook. But in case you are able to create a business page then you can call on Facebook support number.
    Facebook Customer Service Number
    Facebook Technical Support Number
    Facebook Support Number
    Facebook Help Number

    ReplyDelete
  75. Thanks for a very interesting blog. What else may I get that kind of info written in such a perfect approach? I’ve a undertaking that I am simply now operating on, and I have been at the look out for such info. Webdesign

    ReplyDelete
  76. Thanks for sharing.
    Get instant online help of HP printer issue then you can take help of our official site and you may call HP printer toll-free number 1-800-304-9126. They provide instant help of HP printer issues.

    HP printer customer support number
    HP customer support phone number
    HP laptop phone number
    HP technical support number
    HP scanner support number

    ReplyDelete
  77. Great article with excellent idea!Thank you for such a valuable article. I really appreciate for this great information.. Webdesign

    ReplyDelete
  78. I read a article under the same title some time ago, but this articles quality is much, much better. How you do this.. Webdesign

    ReplyDelete
  79. Webdesigner waar u een professionele en betaalbare website kan laten maken? De nr. 1 webdesigner in Limburg, Antwerpen en Vlaams-Brabant voor SEO websites. Webdesigner

    ReplyDelete
  80. Yahoo customer service phone number can offer you complete solutions for all your Yahoo related issues. Our team includes well-qualified professionals with good experience who can share a reliable solution for you all Yahoo related problems.

    ReplyDelete
  81. Get solutions for any problems you can get in touch with our technical experts using HP toll-free number and get your issues resolved as soon as they start to affect you.
    HP Customer Care Number
    HP Printer Customer Care Number
    HP Laptop Tech Support Number

    ReplyDelete
  82. Wow! Such an amazing and helpful post this is. I really really love it. It's so good and so awesome. I am just amazed. I hope that you continue to do your work like this in the future also Webdesign bureau

    ReplyDelete
  83. Very creative and valuable post. I learn many things from your blogs. thanks for sharing

    check my recent post about the benefis ofPST Viewer tool. It is completely free way to access your Outlook files.

    ReplyDelete
  84. I was reading some of your content on this website and I conceive this internet site is really informative ! Keep on putting up. Escort Web Design

    ReplyDelete
  85. I was suggested this blog by my cousin. I am not sure whether this post is written by him as no one else know such detailed about my difficulty. You are amazing! Thanks! Escorts Mexico City

    ReplyDelete
  86. Interesting and amazing how your post is! It Is Useful and helpful for me That I like it very much, and I am looking forward to Hearing from your next..

    mumbai escorts
    Asian Escorts Sydney
    Sydney Outcalls Escort
    Female Escorts Sydney
    chennai escorts
    Los Angeles Escorts
    Beverly Hills Escort Service

    ReplyDelete
  87. Hi I’m liked the theme of this website post . Tech Trainers is one of the leading provider of IT online trainings.
    software testing
    manual testing
    manual testing tutorial
    software testing course
    manual testing tutorial

    ReplyDelete