Reply to thread

Message

<blockquote data-quote="Deleted member 65228" data-source="post: 708685">He might have children though who might copy across to the offline system, and then if he/someone else needs to use the system and copy files back and the system is infected, a worm component could spread and infect his removable flash drive and then this can cause other systems to be infected.Unlikely nowadays but I guess he just wants to be safe and we can&#039;t really blame him because attacks have changed so much in the recent months and there&#039;s a lot of new malware on a regular basis. Every morning I wake up to media of a brand new variant for banking malware, crypto-currency malware, .... It&#039;s crazy right now.On the plus side though, a majority of malware nowadays DOES call back to home... For example a C&amp;C (Command and Control) server. And thus if this cannot be done, the payload may not even be executed, or may be unable to execute in the first place. And in the case of data exfiltration via networking, backdoor, keylogging... You are a lot more safe in your situation with the disconnected system. Because logs from the keylogger, banking malware, requests to the attacker for instructions, instructions from a botnet server, etc... cannot be performed. Because on your disconnected machine there will not be a way for any active infection to do so.So I am sort of with [USER=69581]@show-Zi[/USER] on this on second thoughts, because even if you did get infected... As long as it&#039;s malicious software from our time now and not an old virus from years ago or on the same lines, chances are it isn&#039;t going to get very far with actually causing any harm. Even crypto-currency mining, the malicious components won&#039;t be able to connect to do it.</blockquote>

[QUOTE="Deleted member 65228, post: 708685"] He might have children though who might copy across to the offline system, and then if he/someone else needs to use the system and copy files back and the system is infected, a worm component could spread and infect his removable flash drive and then this can cause other systems to be infected. Unlikely nowadays but I guess he just wants to be safe and we can't really blame him because attacks have changed so much in the recent months and there's a lot of new malware on a regular basis. Every morning I wake up to media of a brand new variant for banking malware, crypto-currency malware, .... It's crazy right now. On the plus side though, a majority of malware nowadays DOES call back to home... For example a C&C (Command and Control) server. And thus if this cannot be done, the payload may not even be executed, or may be unable to execute in the first place. And in the case of data exfiltration via networking, backdoor, keylogging... You are a lot more safe in your situation with the disconnected system. Because logs from the keylogger, banking malware, requests to the attacker for instructions, instructions from a botnet server, etc... cannot be performed. Because on your disconnected machine there will not be a way for any active infection to do so. So I am sort of with [USER=69581]@show-Zi[/USER] on this on second thoughts, because even if you did get infected... As long as it's malicious software from our time now and not an old virus from years ago or on the same lines, chances are it isn't going to get very far with actually causing any harm. Even crypto-currency mining, the malicious components won't be able to connect to do it. [/QUOTE]

Verification