this post was submitted on 18 Jun 2023
80 points (100.0% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
1443 readers
18 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
Ko-fi | Liberapay |
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
It is less likely, but viruses can absolutely come in non-executable file types. A quick look at VLC media player's changelogs show that there are a lot of updates to fix security issues. Same with PDF files and security issues in Adobe Reader (to relate to your ebook mention). Can't speak to music, but image files are also a common choice for malware embedding. For a good while the easiest way to run homebrew on PSP was by taking advantage of an oversight with how it handled image files to get it to run unsigned code, and similar exploits exist in image reading software.
The only thing someone spreading malware needs is an opportunity. It's not hard to imagine someone tracking torrents for things like cult classic films and then taking advantage when seeders dry up by uploading their own torrent and faking seeders (or sockpuppeting them by using botnet machines) to get their compromised torrent listed at the top of results for that search. I've lost track of how many times I was surprised to find something I thought was reasonably popular with only 15 seeders. It wouldn't take much to game those numbers.
Hell, it's probably even automatable with enough of a media library and time spent scripting. Theoretically could be a good way to build a botnet, or collect endpoints for a shady residential proxy service.
For the record, I've only had issues with TPB content when I was being unreasonably risky (in retrospect) and my antivirus caught things before I was truly infected.
That said my rambling point is: why take the risk when there's plenty of safer options even just in the public tracker space?
Hell, you can browse a web page and get infected with a RAT that doesn't even ping your antivirus.