Now, we will discuss a technique that is used frequently these days: relying on well-known servers to perform certain tasks or transfer a piece of information. This technique has been used by a Russian malware. What the attackers did was they sent the data over their Twitter account and made the target parse it later on. So, on the attacker machine, we just send an order or command as a normal tweet to our Twitter account. Note that there is no direct communication between the attacker and its target, which is really evil here. Later on, the target will parse the tweet and execute that order. The benefits of doing this is are:
- Twitter is a trusted website and it has a very good reputation; most likely, it's a whitelisted website
- This type of attack is very hard to detect, where an unskilled security team would never have thought that this data could be malicious—and one of my goals here is to open your eyes to such malicious attacks
In the next section, from the Kali...