When a document or picture gets infected, does its file type change? [duplicate]





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}







-4
















This question already has an answer here:




  • What is the relationship between MIME types and File .extensions?

    3 answers




I know infected documents in windows have file extension of .pdf.exe or .jpg.exe .
Can you infect a file without changing extension?
Is it the same in linux?










share|improve this question













marked as duplicate by karel, user68186, Pilot6, DK Bose, N0rbert Feb 11 at 20:17


This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.














  • 1





    Strictly there is no extension in posix/unix/linux (including osx). The '.pdf' at the end of the file is just the end-part of the filename. A file's data itself provides the clue as to what's in the file, not the name. You can file filespec to have the system peek inside the file 'filespec' & it'll respond with the type of file.

    – guiverc
    Feb 11 at 11:26











  • If you are able to detect at all that a document or picture is infected, then the workmanship seems poor. Well-made malware can be very, very difficult to detect.

    – user535733
    Feb 11 at 12:48




















-4
















This question already has an answer here:




  • What is the relationship between MIME types and File .extensions?

    3 answers




I know infected documents in windows have file extension of .pdf.exe or .jpg.exe .
Can you infect a file without changing extension?
Is it the same in linux?










share|improve this question













marked as duplicate by karel, user68186, Pilot6, DK Bose, N0rbert Feb 11 at 20:17


This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.














  • 1





    Strictly there is no extension in posix/unix/linux (including osx). The '.pdf' at the end of the file is just the end-part of the filename. A file's data itself provides the clue as to what's in the file, not the name. You can file filespec to have the system peek inside the file 'filespec' & it'll respond with the type of file.

    – guiverc
    Feb 11 at 11:26











  • If you are able to detect at all that a document or picture is infected, then the workmanship seems poor. Well-made malware can be very, very difficult to detect.

    – user535733
    Feb 11 at 12:48
















-4












-4








-4









This question already has an answer here:




  • What is the relationship between MIME types and File .extensions?

    3 answers




I know infected documents in windows have file extension of .pdf.exe or .jpg.exe .
Can you infect a file without changing extension?
Is it the same in linux?










share|improve this question















This question already has an answer here:




  • What is the relationship between MIME types and File .extensions?

    3 answers




I know infected documents in windows have file extension of .pdf.exe or .jpg.exe .
Can you infect a file without changing extension?
Is it the same in linux?





This question already has an answer here:




  • What is the relationship between MIME types and File .extensions?

    3 answers








malware






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Feb 11 at 11:19









Linux_user0987Linux_user0987

15




15




marked as duplicate by karel, user68186, Pilot6, DK Bose, N0rbert Feb 11 at 20:17


This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.









marked as duplicate by karel, user68186, Pilot6, DK Bose, N0rbert Feb 11 at 20:17


This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.










  • 1





    Strictly there is no extension in posix/unix/linux (including osx). The '.pdf' at the end of the file is just the end-part of the filename. A file's data itself provides the clue as to what's in the file, not the name. You can file filespec to have the system peek inside the file 'filespec' & it'll respond with the type of file.

    – guiverc
    Feb 11 at 11:26











  • If you are able to detect at all that a document or picture is infected, then the workmanship seems poor. Well-made malware can be very, very difficult to detect.

    – user535733
    Feb 11 at 12:48
















  • 1





    Strictly there is no extension in posix/unix/linux (including osx). The '.pdf' at the end of the file is just the end-part of the filename. A file's data itself provides the clue as to what's in the file, not the name. You can file filespec to have the system peek inside the file 'filespec' & it'll respond with the type of file.

    – guiverc
    Feb 11 at 11:26











  • If you are able to detect at all that a document or picture is infected, then the workmanship seems poor. Well-made malware can be very, very difficult to detect.

    – user535733
    Feb 11 at 12:48










1




1





Strictly there is no extension in posix/unix/linux (including osx). The '.pdf' at the end of the file is just the end-part of the filename. A file's data itself provides the clue as to what's in the file, not the name. You can file filespec to have the system peek inside the file 'filespec' & it'll respond with the type of file.

– guiverc
Feb 11 at 11:26





Strictly there is no extension in posix/unix/linux (including osx). The '.pdf' at the end of the file is just the end-part of the filename. A file's data itself provides the clue as to what's in the file, not the name. You can file filespec to have the system peek inside the file 'filespec' & it'll respond with the type of file.

– guiverc
Feb 11 at 11:26













If you are able to detect at all that a document or picture is infected, then the workmanship seems poor. Well-made malware can be very, very difficult to detect.

– user535733
Feb 11 at 12:48







If you are able to detect at all that a document or picture is infected, then the workmanship seems poor. Well-made malware can be very, very difficult to detect.

– user535733
Feb 11 at 12:48












1 Answer
1






active

oldest

votes


















1














Those "infected documents" aren't and never have been documents. They are executable files, just like any other app on your computer. However they appear as documents at first glance on a system which does not show file extensions.



As guiverc pointed out, file extensions usually don't mean much on Linux.



Real infected documents use exploits and weaknesses either in the file format itself or the software that the file is opened with. PDFs can have attachments from which an attack can be launched. A quick Google search yielded this page which explains this attack vector: https://leotindall.com/post/pdf-embedding-attacks/






share|improve this answer






























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    1














    Those "infected documents" aren't and never have been documents. They are executable files, just like any other app on your computer. However they appear as documents at first glance on a system which does not show file extensions.



    As guiverc pointed out, file extensions usually don't mean much on Linux.



    Real infected documents use exploits and weaknesses either in the file format itself or the software that the file is opened with. PDFs can have attachments from which an attack can be launched. A quick Google search yielded this page which explains this attack vector: https://leotindall.com/post/pdf-embedding-attacks/






    share|improve this answer




























      1














      Those "infected documents" aren't and never have been documents. They are executable files, just like any other app on your computer. However they appear as documents at first glance on a system which does not show file extensions.



      As guiverc pointed out, file extensions usually don't mean much on Linux.



      Real infected documents use exploits and weaknesses either in the file format itself or the software that the file is opened with. PDFs can have attachments from which an attack can be launched. A quick Google search yielded this page which explains this attack vector: https://leotindall.com/post/pdf-embedding-attacks/






      share|improve this answer


























        1












        1








        1







        Those "infected documents" aren't and never have been documents. They are executable files, just like any other app on your computer. However they appear as documents at first glance on a system which does not show file extensions.



        As guiverc pointed out, file extensions usually don't mean much on Linux.



        Real infected documents use exploits and weaknesses either in the file format itself or the software that the file is opened with. PDFs can have attachments from which an attack can be launched. A quick Google search yielded this page which explains this attack vector: https://leotindall.com/post/pdf-embedding-attacks/






        share|improve this answer













        Those "infected documents" aren't and never have been documents. They are executable files, just like any other app on your computer. However they appear as documents at first glance on a system which does not show file extensions.



        As guiverc pointed out, file extensions usually don't mean much on Linux.



        Real infected documents use exploits and weaknesses either in the file format itself or the software that the file is opened with. PDFs can have attachments from which an attack can be launched. A quick Google search yielded this page which explains this attack vector: https://leotindall.com/post/pdf-embedding-attacks/







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Feb 11 at 13:21









        Kumpel GrasKumpel Gras

        265




        265















            Popular posts from this blog

            Human spaceflight

            Can not write log (Is /dev/pts mounted?) - openpty in Ubuntu-on-Windows?

            張江高科駅