RE: malware added in transit

["Yoanne LE MERCIER" <yoanne.lemercier () acctys com>]

Hi list.

It's surely possible, but I'm not aware of anything doing so at this time
(i'd be interested to see)
This kind of malware would be quite specific to be traffic aware (HTTP
down/upload, FTP, Net shares...),
to be able to understand file transfers negociations and act at the right
time...
And a one-shot* "real-time" file transfer infection can be seriously
"compromised"
depending on the protocol being hikacked, packet sizes, multiple files being
transferred (?),
network problems and much more ...

(*) "one-shot" meaning you dont reset any connection side, which would be
the most stealthy method.

YLM.
 -----Message d'origine-----
De : full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com]De la part de Paul
Envoyé : jeudi 18 mars 2004 13:58
À : full-disclosure () lists netsys com
Objet : [Full-Disclosure] malware added in transit


Hi all, perhaps I'm way off-base but I've been under the impression that
malware can be added to clean transmissions as they pass through infected
nodes.  Is this possible?








Find local movie times and trailers on Yahoo! Movies.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html