Saturday, March 06, 2004
The seems to be a lot of excitement at the moment regarding .zip files and emails. What if the actual .zip file is the email or the email is the actual .zip file:
MIME-Version: 1.0 Content-Type: application/x-zip-compressed Content-Transfer-Encoding: binary
X-Source: 06.03.04 http://www.malware.com
PK ¯.áSÃâ D malware.exeí•[Lf†_ Qk ÇŽ#Ì002 †áðªµ, €ˆUlQ
Working example:
http://www.malware.com/eml.zip
How would this work?
afaik no emailsoftware will unpack a zip archive by default.
Even then, It has to be passwordless zip, and the zip will be unpacked by the virusscanner too.
Gr,
Ivo
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
