Pwning a Spammer's Keylogger

Post by yread » Wed, Apr 25, 2012, 5:47 AM UTC

StavrosK wrote: post #25

yread wrote: post #14

Ah good old HIEW. It's the simplest and nicest disassembler - open a file switch to disassembly with one keypress. Move one line or one byte at a time for defeating code that jumps in the middle of instructions, edit the assembly (ok code bytes) in place with live preview what instructions you're writing. All in 130KB of code :) http://www.hiew.ru/ EDIT: I wonder why is the author using a version from 2004 though...…

> This tool is well worth the money!!! To you, maybe. I have no use for it, so it's not, especially when it costs $200.

Post by acron0 » Wed, Apr 25, 2012, 11:28 AM UTC

Post by pavel_lishin » Wed, Apr 25, 2012, 1:57 PM UTC

hwatson wrote: post #58

pavel_lishin wrote: post #39

Earlier quoted context omitted.

They may also get your 1Password username, since it's your e-mail address. Then all they have to do is download 1Password, try your master password combination with various e-mails you may have typed (signing up for a website, etc.) and suddenly, it's much, much, much worse.

Your 1Password keychain is stored locally and is never uploaded to Agile's servers. The attacker would have to upload the keychain first (or break into your Dropbox, if you have it stored in there)

Post by Duckaz » Thu, Apr 26, 2012, 6:19 AM UTC