Hidden Threat: Alternate Data Streams

Hmm. This is quite interesting. Under any Windows machine with an NTFS disk, you can hide applications inside other files:

C:> type nasty.exe > plain.txt:nasty.exe

You can then run this command with:

C:> start plain.txt:nasty.exe

Now, this might not seem like much, but this is virtually undetectable. You can add any file to another file, and even exerienced sysadmins probably won’t find it!

  RSS Feed for Comments on this Post