When an infected USB flash drive is inserted into another computer, the copy of the malicious application is automatically executed.
With this infection method, the malicious application modifies or creates an autorun.inf file on all of the network shares, local drives, and removable media (including USB flash drives) that are connected to the computer. The autorun.inf file can instruct AutoRun to use a certain type of icon add menu commands and among other things, start an executable.
On Microsoft Windows platforms, “autorun.inf” is the file that contains instructions for the AutoRun functionality. AutoRun functionality is basically designed to perform some actions that are automatically executed when removable media is inserted or removed from a computer. This infection method requires that the victim manually execute the malicious file from their computer to become infected.ĪutoRun.inf modification method: Microsoft Windows and some other operating systems have a functionality that is called “AutoRun” (sometimes also referred to as Autoplay). Quite often there are familiar file icons such as Microsoft Windows icons for videos and images that are used to trick unsuspecting victims into thinking that an executable file is a harmless image or video. With this method, a malicious file is often named with a sensational filename to lure a victim into launching the file and causing malicious code to be executed. Simple file copy method: With this method, a malicious application that is installed on an infected computer simply makes copies of itself to all storage devices that are attached to the infected computer.
At the moment, there are three popular methods that malicious applications use to infect USB flash drives:
0 kommentar(er)
