VB2016 video: Getting duped: piggybacking on webcam streams for surreptitious recordings

If you are going to be at RSA in San Francisco next week, we highly recommend you attend Patrick Wardle’s

talk

on

OS X

malware in 2016 – not just because it is important for

Mac

users to know that they too can fall victim to malware, but also because Patrick is an excellent speaker.

We know, because we have been lucky enough to have him speak at several

VB

conferences, most recently at VB2016 in Denver where Patrick, who is Director of Research at

Synack

, presented a

last-minute paper

on the possibilities of

Mac

malware recording the user via the webcam. Patrick looked at some ‘webcam-aware’ malware samples, and also discussed a new way for malware to covertly record a user-initiated video session.

He also shared his ‘OverSight’ tool that can help users detect ‘secondary’ processes attempting to access an existing

OS X

video session. Like all of Patrick’s detection tools, it is freely available from his


Objective See


website.

Today, we have uploaded the video of Patrick’s VB2016 presentation:

If you are interested in

Mac

malware, why not read the

Virus Bulletin


article

Patrick wrote in 2015, in which he warned about the possibility of dylib hijacking on

OS X

, or read a

blog post

he wrote on his own site this week on the first in-the-wild example of social-engineering macro malware for

OS X

.

VB2016-dates-web.jpg


Posted

in

by

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *