Some of Our Sources
- BoingBoing
- Techcrunch
- Pearsonified
- Smashing Magazine
- You The Designer
- Naldz Graphics
- Noupe
- Web Design Ledger
- Willems Lab
- Dev To
Help Webnuz
Referal links:
May 20, 2017 08:00 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/F1PUArNi2v4/stealing-windows-credentials-using-google-chrome
Stealing Windows Credentials Using Google Chrome
Orome1 writes:A default setting in Google Chrome, which allows it to download files that it deems safe without prompting the user for a download location, can be exploited by attackers to mount a Windows credential theft attack using specially-crafted SCF shortcut files, DefenseCode researchers have found. What's more, for the attack to work, the victim does not even have to run the automatically downloaded file. Simply opening the download directory in Windows File Explorer will trigger the code icon file location inserted in the file to run, and it will send the victim's username, domain and NTLMv2 password hash to a remote SMB server operated by the attackers.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/F1PUArNi2v4/stealing-windows-credentials-using-google-chrome
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot