Here are two examples: A batch file like comment_space-vs-gnp.bat could look like an innocent PNG image like -> comment_space-vs-tab.png

And an EXE like luxury_picture_delugpj.exe could seem ingenuous as an JPG picture -> luxury_picture_deluexe.jpg

With an embedded icon the EXE would also look like a picture thumbnail.

How is this possible?

When renaming a file like luxury_picture_delugpj.exe in Windows -> place the cursor where you want the rest of the file name to appear spelled backwards (like luxury_picture_delu[CURSOR-HERE]gpj.exe) -> press the right mouse button -> select Insert Unicode control character (sounds dodgy already, right?) -> and hit RLO -> press ENTER / save the file name -> and it's DONE

The file name should now appear as in the 1st picture above: luxury_picture_deluexe.jpg. However, it is in fact still the very same EXE.

So, how to avoid getting screwed by an innocent looking ransomware, you may ask?

Simply and as ever before: NEVER TRUST FILE EXTENSIONS!

Plus: Some antivirus solutions might flag such RLO files as suspicious - so you might check out if yours does so.

#maltego #freecourse #osintforgood #dothefreestufffirst #kalilinux #ethicalhacking #cybersecuity #graphanalytics

I personally have participated in a considerable number of CTFs (hacking challenges) by now, rooted some machines on HackTheBox and enjoyed some dedicated Kali Linux training already - and STILL I really enjoy even the basic stuff on THM! Why? I mean, look at it! How nicely it's layed-out, how thoroughly gamified and just how MUCH high-quality CONTENT there is:

And all of them are deliberately focusing on the point. So, you will learn A LOT real quick.

And just recently, THM has released the new Pre Security Learning Path, which allows so-to-say ANYONE with a basic understanding of computers and the internet to learn the most important prerequisites of all those further hacking rooms and learning paths within a couple of days!

Here you can see how they gamified learning "boring" stuff like the OSI-model:

And here the TCP 3-way-handshake:

If you've ever thought something like "one of the things I'll never learn in my life is how to ride the unicycle and hacking", go to tryhackme.com straight away, register and head over to the Pre Security Learning Path and you'll almost certainly be surprised how much fun it can be to learn all this stuff in a gamified byte-sized manner!

Oh, and there might be one more motivation waiting for you – to earn such a fancy-glancy CERTIFICATE with you name on it:

go!