Europe Pub
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
sabreW4K3@lazysoci.al to Privacy@lemmy.dbzer0.comEnglish · 9 days ago

Adult sites are stashing exploit code inside racy .svg files

arstechnica.com

external-link
message-square
25
link
fedilink
  • cross-posted to:
  • hackernews@lemmy.bestiver.se
  • privacy@programming.dev
  • pulse_of_truth@infosec.pub
69
external-link

Adult sites are stashing exploit code inside racy .svg files

arstechnica.com

sabreW4K3@lazysoci.al to Privacy@lemmy.dbzer0.comEnglish · 9 days ago
message-square
25
link
fedilink
  • cross-posted to:
  • hackernews@lemmy.bestiver.se
  • privacy@programming.dev
  • pulse_of_truth@infosec.pub
Running JavaScript from inside an image? What could possibly go wrong?
  • CrackedLinuxISO@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    9
    ·
    8 days ago

    Opening the SVG file opens an empty Edge tab titled Process Monitor. This happens because SVG files on Windows are opened by Edge, even if the user has another browser set as their default.

    https://www.malwarebytes.com/blog/news/2025/08/adult-sites-trick-users-into-liking-facebook-posts-using-a-clickjack-trojan

    • ReversalHatchery@beehaw.org
      link
      fedilink
      arrow-up
      3
      ·
      8 days ago

      that does not explain how does it happen when the svg appears on a page in firefox. firefox won’t try to open all embedded assets with the default file handler in the OS, it will directly use its built in tools to handle it.

Privacy@lemmy.dbzer0.com

privacy@lemmy.dbzer0.com

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@lemmy.dbzer0.com

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don’t be a smartass and try to game the system, we’ll know if you’re breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don’t promote big-tech software
  3. No apathy and defeatism for privacy (i.e. “They already have my data, why bother?”)
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

  • !opensource@programming.dev
  • !selfhosting@slrpnk.net / !selfhosted@lemmy.world
  • !piracy@lemmy.dbzer0.com
  • !drm@lemmy.dbzer0.com
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 81 users / day
  • 998 users / week
  • 2.69K users / month
  • 6.64K users / 6 months
  • 8 local subscribers
  • 3.55K subscribers
  • 462 Posts
  • 3.01K Comments
  • Modlog
  • mods:
  • 𝔽𝕩𝕠𝕞𝕥@lemmy.dbzer0.com
  • Otter@lemmy.ca
  • shaytan@lemmy.dbzer0.com
  • fxomt@piefed.social
  • BE: 0.19.12
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org