Virtual Machine / Security sandbox detection is not new in Malware Technology. For virtual machine detection usually, malware needs to have some sort of system level access / should be able to execute certain machine instruction. Is it possible for malicious web page to understand if you are opening the page in any security sandbox? The answer is Yes! In this short video I explain how browser based malware such as browser exploits can use JavaScript to reliably detect whether they are being executed / run inside a security sand box , virtual machine.
No comments:
Post a Comment