Results 1 to 2 of 2

Thread: Gmail and malware attachments

  1. #1
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,127
    Blog Entries
    5

    Gmail and malware attachments

    The other day I sent a friend a totally harmless test exe I wrote via Gmail, 7-Zipped, no password. I used 7-Zip partly because I knew Gmail scanned .zip files, but not .7z files (so I thought). Apparently they now scan .7z files as well and my attachment was disallowed because it "contained an executable file". Nothing flagged as malicious, just that it had an .exe extension. Whatever. I password protected the file and sent it off again and didn't think much more of it.

    I just happened across the following post and found it interesting in light of what had just occurred to me. I'm just passing it on for reference.

    Is Google Scanning Malware Email Attachments Between Researchers
    http://www.ghettoforensics.com/2014/02/google-actively-scanning-malware-emails.html

    It also turns out (or did at the time), that Google was attempting to unzip password-protected archives, in particular it would succeed with .zip files when the password was "infected", i.e. what is probably the most common password used when malware is casually shared between those who analyze them.

    This raised a bit of a fuss, but a comment reportedly by a Google representative confirmed that a third-party AV engine used by Gmail was designed to automatically open ZIP files with a password of 'infected', and that they were looking into disabling that feature. Not sure if they have or not, but it's something to keep in mind.

  2. #2
    You can't be surprised, right?

    Skynet's very existence is predicated on collecting as much information as possible from each and every user - privacy be damned.

Similar Threads

  1. attachments on posts?
    By Raygun in forum OllyDbg Support Forums
    Replies: 1
    Last Post: May 11th, 2005, 05:20
  2. Gmail
    By gabri3l in forum Off Topic
    Replies: 11
    Last Post: September 30th, 2004, 09:39
  3. attachments...
    By MEPHiST0 in forum Off Topic
    Replies: 10
    Last Post: May 29th, 2004, 15:54
  4. How to add attachments?
    By mike in forum Advanced Reversing and Programming
    Replies: 2
    Last Post: March 6th, 2001, 16:09

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •