Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
gruez
16 days ago
|
parent
|
context
|
favorite
| on:
Notepad++ supply chain attack breakdown
You would be a dumbass to do that, because virustotal allows security researchers to see submitted samples/urls. The last thing you want to do is to draw attention to your C&C server.
wyldberry
16 days ago
[–]
It's not uncommon to use VT and other sandbox tools as a proxy indicator for if your attacks have tripped defenders and tooling.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: