Keylogging Via A Phishing Attack
|
|
|
||||||||||||
Description:
In this video, we see a demonstration of how to install a keylogger remotely on a victim machine using a Phishing attack. The basic idea is to use a man-in-the-middle attack using Ettercap and inject malicious HTML into the web pages requested by the victim. These web pages recommend download of the latest flash player. Most users will happily click on a link presented to them by the browser. Once the user clicks the link, a file is sent for download. This file is nothing but a Reverse TCP metasploit payload, compiled as an EXE. Once this is executed, it connects back to the attacker who now remotely runs a keylogger on the victim computer. Game Over!
Thanks to Netinfinity (vitomir [] securitytube.net ) for referring this video to us!
Thanks to Netinfinity (vitomir [] securitytube.net ) for referring this video to us!
Comments (1)
 |
KroKite on Sun 29 Jan 2012 Wow... Brilliant 1.. Gonna try this. |