Sucuri的Peter Gramantik发现一种恶意代码,隐藏在JPG文件的EXIF首部,然后通过PHP函数exif_read_data和preg_replace来读取和执行,详细分析参见:
http://blog.sucuri.net/2013/07/malware-hidden-inside-jpg-exif-headers.html
HN讨论: https://news.ycombinator.com/item?id=6053738
http://blog.sucuri.net/2013/07/malware-hidden-inside-jpg-exif-headers.html
HN讨论: https://news.ycombinator.com/item?id=6053738