Thursday, October 30, 2014

Reflected File Download - A New Web Attack Vector


From my Company's Blog:

On October 2014 as part of my talk at the Black Hat Europe 2014 event, I presented a new web attack vector that enables attackers to gain complete control over a victim’s machine by virtually downloading a file from trusted domains. I decided to call this technique Reflected File Download (RFD), as malware can be "downloaded" from highly trusted domains such as Google.com and Bing.com without ever being uploaded...

The full blog post, including links to the WhitePaper and exploit videos is now available:
http://blog.spiderlabs.com/2014/10/reflected-file-download-the-white-paper.html

47 comments:

  1. Y1 - Play Free Online Y1 Games for everyone. Y1 Games fun to relux. - http://www.sagagames.net/games/y1

    ReplyDelete
  2. Undoubtedly an excellent information and the article as a whole. But I can bet with you)
    Tell me, if such an attack is still the option if you're using a cloud server storage of personal and corporate data virtual data room providers?

    ReplyDelete
  3. File sharing can be defined as the practice of circularizing or allowing access to folders like audio, video, images, computer programs, documents, and electronic books.
    shareit app - the file transferring tool

    ReplyDelete
  4. You have done a great job. I will definitely dig it and personally recommend to my friends. HTTP://KCCATL.COM/ I am confident they will be benefited from this site

    ReplyDelete
  5. I utilized it for a month and saw a discernible distinction in myself. here Presently I don't short of going out with my companions and so forth.

    ReplyDelete
  6. Gscbv#wfhbawhb#46# html:$₩gffhhhh@.com

    ReplyDelete
  7. Upon finding a website that practices an adamant amount of safety you can then commence in the download process without any ailments. http://www.getintopc.co

    ReplyDelete
  8. The driver discs can become problematic as result of several factors. Get Into Pc

    ReplyDelete
  9. Incredible articles and awesome design. Your blog entry merits the greater part of the positive input it"s been getting. Getintopc

    ReplyDelete
  10. Incredible articles and awesome design. Your blog entry merits the greater part
    igg games

    ReplyDelete

  11. Wow Very Nice Information Thanks For Sharing It.
    Getintopc

    ReplyDelete
  12. Nice Information Thanks For Sharing It.Really Thanks
    Getintopc

    ReplyDelete
  13. The driver discs can become problematic as result of several factors.
    filehippo

    ReplyDelete

  14. It was nice unblock game . Very informative and expressive .things are easily play online at
    unblock games

    ReplyDelete

  15. There are millions of people that navigate the internet on a daily basis, precariously venturing around for downloadable software. However, before you engage in downloading any means of software from a site you need to ensure that the site is safe
    http://getintopcsofts.com

    ReplyDelete
  16. Get Here if you want download pc games free you are right now check here ocean of games

    ReplyDelete
  17. It was nice articles . Very informative and expressive .things are easily explained by admin,i was downloaded some days before but I got error while installing , I thing somewhere i made mistake. Now , I find my Fault after this very good readable blog . so I am very Thankful to The Admin and Please Buddy Share your Knowledge Time to Time .
    filehippo
    file hippo
    File hippo
    Download Free PC Software
    File hippo

    ReplyDelete
  18. Hello! Find our premium wordpress templates for any kind of business here https://wordpresstemplates.ch/

    ReplyDelete
  19. No matter how many times I read this, I will never get bored of it.
    ui/ux design

    ReplyDelete
  20. Domain hosting wiki: for bloggers, business owners and webmasters looking for starting, maintaining and knowing more about domains and hosting
    hosting

    ReplyDelete
  21. The webpage should be downloaded as quick as could be expected under the circumstances read more about web design

    ReplyDelete
  22. I can only express a word of thanks! Nothing else. Because with the content on this blog I can add knowledge. Thank you very much has been sharing this information. AvriqAvriq India

    ReplyDelete
  23. My sis would like to provide her wed development services to your great company. She has been working in this field for decades now.

    ReplyDelete
  24. Really this is an effective post from a consultant and thanks for sharing this high-quality information with us. webhosting review

    ReplyDelete
  25. Document offering might be characterized Concerning illustration those act about circularizing or permitting right on folders in audio, video, images, PC programs, documents, Furthermore electronic books.

    ReplyDelete
  26. Simply wish to say your article is as outstanding. The clearness on your submit is just excellent and i can suppose you are an expert on this subject.
    Gurgaon Escort Girls Available Online
    Female Escort in Dwarka

    ReplyDelete
  27. wow, great, I was wondering how to cure acne naturally. and found your site by google, learned a lot, now i’m a bit clear. I’ve bookmark your site and also add rss. keep us updated. Get into pc

    ReplyDelete
  28. simple superb blog presented by the admin... keep on providing such useful stuff thank you..

    ReplyDelete
  29. I've found a very useful website for downloading free software, freeware and shareware. You can download lots of free stuff here.
    Visit softolite and get unlimited free software. You can download windows, graphic design software and ms office from here. Please get in touch and enjoy the free applications .

    ReplyDelete
  30. This comment has been removed by the author.

    ReplyDelete
  31. This comment has been removed by the author.

    ReplyDelete
  32. Wow Very Nice Information Thanks For Sharing It.
    https://www.filehippo.co.com/

    ReplyDelete
  33. Thanks for sharing this interesting blog with us.My pleasure to being here on your blog..I wanna come beck here for new post from your site.
    if you want download fc softwer for free visit www.getinto-pc.co

    ReplyDelete