• Alvaro@lemmy.blahaj.zone
    18·
    1 month ago

    For the millionth time, wine is still a path for viruses. This virus can still run if you have wine and it can still do damage. Wine is not a sandbox.

  • Sibbo@sopuli.xyz
    98·
    1 month ago

    Open an issue in wine, tell them that not supporting malware robs you of the true native windows experience.

  • minfapper@piefed.socialEnglish
    1341·
    1 month ago

    Unfortunately, it’s only a matter of time until native Linux malware becomes more rampant

    • fartsparkles@lemmy.world
      26·
      1 month ago

      It already is pretty rampant, however most Linux admins have minimal if any detection strategy.

      Additionally, while there’s plenty of binaries about like VoidLink, almost all campaigns against Linux hosts target SSH, or RCE vulnerabilities, and deliver shell scripts that orchestrate the attack.

      Why compile a binary when the shell has everything you need? The threat models are pretty different between Windows and the *nix world.

      When you look at botnet composition, they’re usually made up of outdated Linux hosts with SSH open with password-based authentication.

      Seriously people, switch to key-based auth and disable password auth entirely.

    • mlg@lemmy.worldEnglish
      171·
      1 month ago

      I forgot but do browsers download binaries as executable?

      One of the big issues with windows is the fact that it uses file extensions for determining file type, so EXEs can just be instantly run after downloading, which led to MSFT making the “Mark Of Th Web” attribute, which moved hackers into finding every type of bypass for MOTW.

      I think straight bin downloads require you to chmod +x first, but you could also probably bypass it with any archive format like .tar.gz or opting for a .deb or .rpm.

      The upside is that you really shouldn’t be downloading raw bins outside of the package manager, but there are a bunch of tools that only ship as appimages, so you’re kinda screwed if you download and execute from an untrusted source.

      • Retail4068@lemmy.world
        29·
        1 month ago

        You can kindly fuck off with this level of hand holding lol. Forcing me to +x by default is a massive pain in the ass.

        • TimeSquirrel@kbin.melroy.org
          5·
          1 month ago

          You are not the only thing capable of running binaries on your system. There’s always the possibility of something else being compromised that now has the capability to run this binary.

          Security comes in many layers on top of each other and with software having to work together to plug all possible holes, not just the direct exploitation paths you are currently actively conscious about and using.

          • Retail4068@lemmy.world
            1·
            1 month ago

            I can’t emphasize enough, how much I and ol most others, could not give two fucks about hardening a home desktop. Just fine me a button. I don’t want to be trying passwords.

        • 0x0@infosec.pub
          14·
          1 month ago

          Forcing you to +x is the opposite of handholding. Do you want sudo to wipe your ass as well?

    • Rothe@piefed.socialEnglish
      4·
      1 month ago

      That is indeed one of the unfortunate but inevitable results of the OS becoming more popular.

    • Galactose@sopuli.xyz
      5·
      1 month ago

      Reminder, that once a vulnerability is found, it disappears, FOREVERRRRRR

      You don’t get that with windows.

  • jaybone@lemmy.zipEnglish
    49·
    1 month ago

    These Indian scammers keep calling me telling me I have a virus and I need to go to start menu.

    I don’t even have a start menu. 🤷

    • cRazi_man@europe.pub
      44·
      1 month ago

      Isn’t there a video on YouTube of a person trolling a scammer like this? The guy skinned Linux to look like Windows and then gave a phone scammer remote access to their PC and watched him get more and more frustrated and confused by why it wasn’t working properly