this post was submitted on 24 Aug 2026
161 points (96.5% liked)

Cybersecurity

10501 readers
114 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 3 years ago
MODERATORS
top 23 comments
sorted by: hot top controversial new old
[–] nymnympseudonym@piefed.social 56 points 3 days ago (2 children)

Related:

  • If you are about to have sex with an extremely sketchy stranger you just met behind a dive bar, use a condom
  • If you are about to open an extremely sketchy download you just torrented off a link on Dread, use a VM
[–] massive_bereavement@fedia.io 24 points 3 days ago (2 children)

Funny thing some malware checks if your hardware is virtualized. It is a bit tough to make a VM appear legit, so I tend to use a sacrificial laptop I have for this kind of work.

Your advise is good as it will tell you if the thing is real but the malware might not trigger.

[–] Dave@lemmy.nz 14 points 2 days ago

My favourite story of this is that ransomware virus that was taking out places like the NHS, and some security researcher noticed it kept pinging some domain that was a random bunch of characters.

He registered the domain, and suddenly the ransomware shut down, freeing all the places the ransomware had infected.

It turns out when researching a virus the environments commonly treat all domains as valid so they can capture the traffic and see what the virus is doing. To prevent this, the ransomware was designed to shut down if this clearly fake domain came back as valid (and I guess this was the release switch if the ransom was paid). That was it would shut down if in this kind of a sandboxed environment.

The story is here, written by the researcher so it's a bit technical. There were lots of news stories about it at the time too.

[–] Ajen@sh.itjust.works 4 points 3 days ago (2 children)

VMs have vulnerabilities, if you really want to be safe use a dedicated air-gapped pc, or don't run it at all.

[–] noobface@lemmy.world 13 points 2 days ago (1 children)

You sitting on some hypervisor zero days worth fucking millions over here to infect some idiot trying to run GTA6?

[–] Ajen@sh.itjust.works 1 points 2 days ago

You have any idea how many people don't update their computers?

[–] mlg@lemmy.world 2 points 2 days ago (1 children)

I somewhat doubt the malware devs chucking their probably pirated copy of some cred stealer have implemented some zero day VM breakout exploit lol.

[–] Ajen@sh.itjust.works 3 points 2 days ago

So do I, but there are enough people running out of date software that old vulnerabilities are still being actively exploited.

[–] viertesauge@feddit.org 9 points 3 days ago

"no one knows weather"

uhm theres a weather app on my phone right now and I can also just look outside the window..

[–] 20cello@lemmy.world 8 points 3 days ago

Hahaha,remind me of the good old times

[–] givesomefucks@lemmy.world -5 points 3 days ago (2 children)

I wouldn't be surprised if Rockstar is seeding the malware so people don't trust the inevitable cracked game...

The leakers don't just have footage, they have a playable build. One that appears mostly finished and in a relatively playable state. If it was before security stuff was added in, there may be no way to stop people from using it in single player, or even possibly using future versions of this build to cheat.

I didn't realize how big of a deal this might be till this morning, I thought they just had footage that was about to be released, but this could end up costing rockstar billions in dollars.

[–] subterfuge@lemmy.world 12 points 3 days ago (3 children)

Isn’t this a federal crime?

[–] TheTechnician27@lemmy.world 20 points 3 days ago* (last edited 3 days ago) (2 children)

givessomefucks' entire job on Lemmy is to spout absolute unhinged nonsense when they have no idea what they're talking about – but to say it authoritatively enough that people believe them and to never go on the defensive when called out.

It's completely insane.

[–] Grimy@lemmy.world 3 points 3 days ago* (last edited 3 days ago)

From my understanding, the leakers do have a playable build. Not much is known though. What's unhinged about this, and why would federal crime charges worry some guy that's probably somewhere in Asia or eastern Europe behind an army of vpns. Most hacking and leaking we hear about isn't legal.

Edit: oh the malware part, I get it. Ya that's silly. I misunderstood the federal crime rebuttal.

[–] goferking0@lemmy.sdf.org -3 points 3 days ago

I had no idea it expanded past their rant on how the dnc is improving AND any evidence to the contrary is just neoliberal propaganda

[–] kmartburrito@lemmy.world 4 points 3 days ago

Oh yeah, most likely

[–] givesomefucks@lemmy.world -1 points 3 days ago* (last edited 3 days ago)

Oh no, you're right...

A billion dollar corporation would never commit a crime to maximize profits, obviously the swift hand of capitalism and federal regulations under Donald fucking trump would prevent any corporation from ever committing a crime.

I can't believe I was that naive, thank you soooooooo much for reminding that a corporation would neeeeeeever commit an illegal act.

Whew...

I feel so much better now.

[–] mrmisses@lemmy.world 6 points 3 days ago

Guess they should release it on PC before we all just grab the hacked version