Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).
This community is automagically fed by an instance of Dittybopper.
- A README file instructing users to install a “special codec” to play the video.
- A suspicious executable file named xmph_codec.exe, masquerading as the required codec installer.
- A video file that appeared legitimate but could not be played without the “codec.”
This is downloading from the internet 101. Most good downloaders will let you filter out executable files, but on top of that good hygiene dictates if you download a media file and there is no media file.... Delete it.
I love how the recommendations for avoiding attacks like this include avoiding pirated content but ignores the fact that you have to go to a clearly hijacked site to download this, and then run an installer with the flimsy justification of getting a "special codec." This is not a sophisticated attack or something endemic to piracy, basic common sense would protect you from this. I can't believe people are still falling for this stuff.