s3ntinel
Jun 14 2005, 03:50 AM
Hi all,
I'm having a discussion with a colleague at work about malware and he states that there is no current malware that is designed to work with authenticated proxies. Is anyone aware of malware that does this?
Also, the same colleague is saying that it is not possible for a piece of malware to compromise a host and then send information back across a proxy via https. Is this possible?
belgther
Jun 14 2005, 07:23 AM
if the malware grabs authentication info for proxies from somewhere, it can work with them as well. At least some web password bruters work with authenticated proxies, too, but you have to enter the authentication info manually.
Information can also be sent on HTTPS by malicious programs, but they have to find a HTTPS server to send these informations. That's possible with a proxy, too, because there are HTTPS proxies, too, and these proxies can be used to transfer information.