Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Understanding Header Spoofing and Its Impact on Malware Risks and Detection

Calendar Jul 29, 2013 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

network security cyber threats data integrity header spoofing malware communication
Spoofing Header spoofing is when a URL appears to be downloaded from a certain domain, but in reality it is downloaded from a different and (very likely) malicious one. Unlike other types of spoofing techniques, this action is done without any system or file modification. Instead, header spoofing is performed by modifying the network packet, in particular adding the new domain to the request header once malware has connected to server and right before it sends the data. My colleague Jessa dela Torre mentioned this behavior in her research on the StealRat botnet.

The link for this article located at TrendLabs is no longer available.