Reply to thread

Message: <blockquote data-quote="Andy Ful" data-source="post: 1073758" data-attributes="member: 32260">I think that the Madiant researchers tried to show a novel way of abusing legal websites that can be pretty hard to detect. So, the payloads can survive undetected on the web and can be accessed by malware. Users cannot be infected by visiting the abused websites, but those legal websites can be a part of a successful attack.In this way, the malicious code is not stored in the initial malware and the initial malware does not contain malicious URLs.  The code is updated (after execution) from a legal website. Such malware has a great chance of bypassing AV detection.</blockquote>

Top