Overclock.net › Forums › Industry News › Software News › [SCMag] Researcher finds way to send executable file on Facebook
New Posts  All Forums:Forum Nav:

[SCMag] Researcher finds way to send executable file on Facebook

post #1 of 8
Thread Starter 
Quote:
Researchers have discovered a way to evade Facebook security controls to deliver a message on the social networking site that contains an executable file.
http://www.scmagazineus.com/research...rticle/215579/
    
CPUMotherboardGraphicsRAM
Intel I7 2600k Asus p8p67-Deluxe Zotac GTX780 6GB OC G-skill Ripjaws 1866 
Hard DriveHard DriveHard DriveOptical Drive
Samsung 840 EVO 250 Samsung EVO 120 Western Digital 1TB Black Lite On 20x DVD RW 
CoolingOSOSOS
XSPC RayStorm + 360Extreme Rad Arch Linux Windows 8.1 x64 WindowsRE 
MonitorKeyboardPowerCase
Asus PB278Q ThermalTake Meka G1 Evga SuperNova 1000 P2 Xigmatek Elysium 
MouseMouse PadAudio
Logitec G500 Gaming Mouse Ultra Pad Fiio E-17 + ATH-M50 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
Intel I7 2600k Asus p8p67-Deluxe Zotac GTX780 6GB OC G-skill Ripjaws 1866 
Hard DriveHard DriveHard DriveOptical Drive
Samsung 840 EVO 250 Samsung EVO 120 Western Digital 1TB Black Lite On 20x DVD RW 
CoolingOSOSOS
XSPC RayStorm + 360Extreme Rad Arch Linux Windows 8.1 x64 WindowsRE 
MonitorKeyboardPowerCase
Asus PB278Q ThermalTake Meka G1 Evga SuperNova 1000 P2 Xigmatek Elysium 
MouseMouse PadAudio
Logitec G500 Gaming Mouse Ultra Pad Fiio E-17 + ATH-M50 
  hide details  
Reply
post #2 of 8
I don't like where this is going...
Oddyseus
(17 items)
 
   
CPUMotherboardGraphicsGraphics
Intel Core i5 750 P7P55 WS SUPERCOMPUTER NVIDIA GeForce GTX 470 NVIDIA GeForce GTX 470 
RAMRAMHard DriveOptical Drive
Corsair  Corsair  1TB Hitatchi 7200 RPM ASUS DVDRW 
OSMonitorMonitorKeyboard
Windows 7 Home Premium ASUS VH232  Dell 16" Logitech G110 
PowerCaseMouseMouse Pad
XFX BE 750w CM 690 Logitec G700 There's a slot for a mouse pad now? 
Audio
ASUS Xonar Essence STX 
CPUMotherboardGraphicsRAM
Core-i5 520M Acer Aspire 5740 ATI Radeon 5650m 4GB DDR3 1066 
Hard DriveAudio
320GB 5400RPM Creative X-Fi HD 
  hide details  
Reply
Oddyseus
(17 items)
 
   
CPUMotherboardGraphicsGraphics
Intel Core i5 750 P7P55 WS SUPERCOMPUTER NVIDIA GeForce GTX 470 NVIDIA GeForce GTX 470 
RAMRAMHard DriveOptical Drive
Corsair  Corsair  1TB Hitatchi 7200 RPM ASUS DVDRW 
OSMonitorMonitorKeyboard
Windows 7 Home Premium ASUS VH232  Dell 16" Logitech G110 
PowerCaseMouseMouse Pad
XFX BE 750w CM 690 Logitec G700 There's a slot for a mouse pad now? 
Audio
ASUS Xonar Essence STX 
CPUMotherboardGraphicsRAM
Core-i5 520M Acer Aspire 5740 ATI Radeon 5650m 4GB DDR3 1066 
Hard DriveAudio
320GB 5400RPM Creative X-Fi HD 
  hide details  
Reply
post #3 of 8
Not good...............
Ivy Bridge
(18 items)
 
   
CPUMotherboardGraphicsRAM
i7 3770k Asus P8Z77-V Deluxe Sapphire HD 7970 Vapor-X 3GB GSkill Ripjaws DDR3 2133mhz 
Hard DriveOptical DriveOptical DriveCooling
1x Intel 520 120GB SSD, 2x 2TB, 2x 1TB, 1x 320G... LiteOn Bluray Burner LiteOn DVD Burner Corsair H100 w/ 4x 120mm Cougar fans (push/pull) 
OSMonitorKeyboardPower
Windows 7 Ultimate 64-bit SAMSUNG 32" 1080p 120Hz LCD HDTV LN32B650 Das Keyboard S Professional Corsair 850W Silver Rated 
CaseMouseAudioAudio
NZXT 810 Switch Logitec MX518 Audio Technica ATH-M50 FiiO E7 w/ AudioQuest Cinnamon USB cable 
Audio
AudioEngine A2 stereo speakers 
CPUMotherboardGraphicsRAM
QX 6700 ASUS Striker Extreme gutted out GSkill DDR2 800mhz 4GB 
Hard DriveOptical DriveOSMonitor
gutted out NEC DVD Burner Windows 7 Ultimate 64-bit removed 
KeyboardPowerCaseMouse
removed Corsair 850W - mostly dead CM 810 Stacker removed 
Audio
removed 
  hide details  
Reply
Ivy Bridge
(18 items)
 
   
CPUMotherboardGraphicsRAM
i7 3770k Asus P8Z77-V Deluxe Sapphire HD 7970 Vapor-X 3GB GSkill Ripjaws DDR3 2133mhz 
Hard DriveOptical DriveOptical DriveCooling
1x Intel 520 120GB SSD, 2x 2TB, 2x 1TB, 1x 320G... LiteOn Bluray Burner LiteOn DVD Burner Corsair H100 w/ 4x 120mm Cougar fans (push/pull) 
OSMonitorKeyboardPower
Windows 7 Ultimate 64-bit SAMSUNG 32" 1080p 120Hz LCD HDTV LN32B650 Das Keyboard S Professional Corsair 850W Silver Rated 
CaseMouseAudioAudio
NZXT 810 Switch Logitec MX518 Audio Technica ATH-M50 FiiO E7 w/ AudioQuest Cinnamon USB cable 
Audio
AudioEngine A2 stereo speakers 
CPUMotherboardGraphicsRAM
QX 6700 ASUS Striker Extreme gutted out GSkill DDR2 800mhz 4GB 
Hard DriveOptical DriveOSMonitor
gutted out NEC DVD Burner Windows 7 Ultimate 64-bit removed 
KeyboardPowerCaseMouse
removed Corsair 850W - mostly dead CM 810 Stacker removed 
Audio
removed 
  hide details  
Reply
post #4 of 8
Farmville.exe anyone?
post #5 of 8
"penetration tester Nathan Power" best job title and name ever lol
Current Rig
(15 items)
 
  
CPUMotherboardGraphicsRAM
i5 2500k ASRock Extreme3 Gen3 xfx 290x Cryovenom Corsair Vengeance 
Hard DriveCoolingOSMonitor
Intel SSD CPU and GPU in common loop Windows 7 x64 Dell Ultrasharp 24" 
PowerCaseMouseMouse Pad
PC Power and Cooling 610W Coolermaster 690 II Advanced DeathAdder Old Class Notebook 
Audio
X-Fi Titanium 
  hide details  
Reply
Current Rig
(15 items)
 
  
CPUMotherboardGraphicsRAM
i5 2500k ASRock Extreme3 Gen3 xfx 290x Cryovenom Corsair Vengeance 
Hard DriveCoolingOSMonitor
Intel SSD CPU and GPU in common loop Windows 7 x64 Dell Ultrasharp 24" 
PowerCaseMouseMouse Pad
PC Power and Cooling 610W Coolermaster 690 II Advanced DeathAdder Old Class Notebook 
Audio
X-Fi Titanium 
  hide details  
Reply
post #6 of 8
did you guys even read the article?

Quote:
A Facebook spokesman, in an email to SCMagazineUS.com, said the exploit, as diagrammed by the researcher, would not impact a recipient.

"The attack...would only allow a user to send an obfuscated renamed file to another user, but this file would not execute on a recipients machine,"
Flag Ship
(16 items)
 
  
CPUMotherboardGraphicsRAM
Sandy Bridge 2600k ASRock Extreme6 Z77 EVGA GTX680 Patriot Viper 3 Intel Extreme Masters 2133MHz 
Hard DriveHard DriveOptical DriveCooling
WD Caviar Black 1TB 7200rpm OCZ Agility 2 LG 12x BD-ROM Cooler Master Hyper 212 Evo 
OSMonitorKeyboardPower
Windows 7 x64 Asus 23.6" LED Logitech G110 Rosewell 1000w 
CaseMouseMouse PadAudio
NZXT Switch 810 (White) Logitech G9x Razer Vespula Creative Sound Blaster Titanium 
  hide details  
Reply
Flag Ship
(16 items)
 
  
CPUMotherboardGraphicsRAM
Sandy Bridge 2600k ASRock Extreme6 Z77 EVGA GTX680 Patriot Viper 3 Intel Extreme Masters 2133MHz 
Hard DriveHard DriveOptical DriveCooling
WD Caviar Black 1TB 7200rpm OCZ Agility 2 LG 12x BD-ROM Cooler Master Hyper 212 Evo 
OSMonitorKeyboardPower
Windows 7 x64 Asus 23.6" LED Logitech G110 Rosewell 1000w 
CaseMouseMouse PadAudio
NZXT Switch 810 (White) Logitech G9x Razer Vespula Creative Sound Blaster Titanium 
  hide details  
Reply
post #7 of 8
It's common to parse filenames to get at the file extension. I've done this in my own development. Their parsing function may or may not be simple, but like the article says, it's not going to execute unless the victim renames it with the proper extension.

Nothing to see here.
    
CPUMotherboardGraphicsRAM
9 Pentium 4 HT's @ 2.8 GHz Foxconn LS-36' s OB 4 GB server, 2 GB nodes 
Hard DriveOSMonitorKeyboard
40 GB WD Fedora 10 24" LG LG wireless 
PowerCaseMouseMouse Pad
9 Antec 350's Wood, bars, rails..... you'll see. Microsoft IR UCF Golden Nights 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
9 Pentium 4 HT's @ 2.8 GHz Foxconn LS-36' s OB 4 GB server, 2 GB nodes 
Hard DriveOSMonitorKeyboard
40 GB WD Fedora 10 24" LG LG wireless 
PowerCaseMouseMouse Pad
9 Antec 350's Wood, bars, rails..... you'll see. Microsoft IR UCF Golden Nights 
  hide details  
Reply
post #8 of 8
Why would they use extension based filtering as opposed to mimetype filtering? o_O
Echo
(8 items)
 
   
CPUMotherboardGraphicsRAM
Intel Core i5-3570K Asus Maximus V Gene Asus Radeon HD 7970 3GB Mushkin Blackline 16GB 
Hard DriveHard DriveCaseOther
2x Samsung 830 256GB Seagate Barracuda 3TB Silverstone Temjin TJ08-E BeQuiet E9-700w 
CPUMotherboardRAMHard Drive
Intel i3-3225 ASUS P8B75-MLX Corsair Ballistix Tactical Western Digital Red 
OSPowerCaseOther
Ubuntu Corsair CX500M Norco RPC-4224 LSI SAS 9207-4i4e HBA 
Other
Chenbro CK22804 24-Port SAS Expander Card 
  hide details  
Reply
Echo
(8 items)
 
   
CPUMotherboardGraphicsRAM
Intel Core i5-3570K Asus Maximus V Gene Asus Radeon HD 7970 3GB Mushkin Blackline 16GB 
Hard DriveHard DriveCaseOther
2x Samsung 830 256GB Seagate Barracuda 3TB Silverstone Temjin TJ08-E BeQuiet E9-700w 
CPUMotherboardRAMHard Drive
Intel i3-3225 ASUS P8B75-MLX Corsair Ballistix Tactical Western Digital Red 
OSPowerCaseOther
Ubuntu Corsair CX500M Norco RPC-4224 LSI SAS 9207-4i4e HBA 
Other
Chenbro CK22804 24-Port SAS Expander Card 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Software News
Overclock.net › Forums › Industry News › Software News › [SCMag] Researcher finds way to send executable file on Facebook