#snailload — Public Fediverse posts

I have just presented our paper on Zero Click SnailLoad at ESORICS 2025 in Toulouse. Thank you to all who attended my talk, also for the nice discussion!

Also thanks to @c1t for taking the picture!

#ESORICS2025 #Toulouse #SnailLoad #sidechannel

Nuisance of the day: Mobile email applications that automatically render HTML mails by default, including links, without clearly indicating where they go. "Bonus" points for loading external references without asking.
Just now, somebody showed me a fully rendered phishing mail in their web.de app.
Of course, I had to do a quick SnailLoad demo and that one works, too, with a client-side connection to the attacker server. 🤔
We investigated problematic behavior like this in our Zero-Click SnailLoad paper, so this is just yet another case.
However, I said it before and I will say it again: HTML emails are a pest, especially with external references!

#SnailLoad #phishing #tracking #email

In our new paper (accepted at ESORICS 2025), we explore how attackers can mount automated SnailLoad attacks without requiring the user to explicitly click a link to the attacker's server.
For this, we exploit the automatic handling of external references in messenger and email applications, as well as responses from home routers to TCP SYNs targeting closed ports.
The full paper is available here: https://stefangast.eu/papers/zeroclicksnailload.pdf

Thank you to Nora Puntigam, @silent_bits, @vmcall, @lavados and Johanna Ullrich for the fantastic collaboration!

#ESORICS2025 #SnailLoad

SnailLoad: the next Side-Channel Attack found by the University of Technology in Graz: https://www.snailload.com #snailload

#SnailLoad is now CVE-2024-39920: https://nvd.nist.gov/vuln/detail/CVE-2024-39920

New SnailLoad Attack Exploits Network Latency to Spy on Users' Web Activities
https://thehackernews.com/2024/06/new-snailload-attack-exploits-network.html #SnailLoad

SnailLoad Allows Attackers to Trace Visited Websites By Measuring Network Latency https://thecyberexpress.com/snailload-measuring-network-latency/ #GrazUniversityofTechnology #TheCyberExpressNews #CybersecurityNews #sidechannelattack #TheCyberExpress #networklatency #FirewallDaily #SnailLoad

"New attack named SnailLoad allows a remote attacker to infer websites and videos viewed by a user without direct access to network traffic."

https://www.securityweek.com/new-snailload-attack-relies-on-network-latency-variations-to-infer-user-activity

#cybersecurity #snailload #cybersec #infosec #itsec

Grazer Lauschangriff braucht bloß TCP/IP - weder Malware noch Sicherheitslücke | c't Magazin https://www.heise.de/news/SnailLoad-Lauschangriff-ohne-Man-in-the-Middle-und-ohne-Code-auf-dem-Zielsystem-9775311.html #SnailLoad

By me @Forbes: SnailLoad attack methodology allows for spying without infiltrating the network or installing malware. It’s clever, but is it dangerous?

# infosec #SnailLoad #PrivacyMatters

https://www.forbes.com/sites/daveywinder/2024/06/25/new-hack-attack-slows-internet-speed-to-see-what-videos-you-watch/

Während der Arbeitszeit gleichzeitig youtube-Videos und twitch-streams schauen ist das neue
"Radio an und die Unterhaltung bei laufender Dusche im Badezimmer führen": Es fügt Abhörschutz durch Rauschen hinzu. ;-)

https://www.heise.de/news/SnailLoad-Lauschangriff-ohne-Man-in-the-Middle-und-ohne-Code-auf-dem-Zielsystem-9775311.html

#SnailLoad

Ach ja, #SnailLoad https://www.heise.de/news/SnailLoad-Lauschangriff-ohne-Man-in-the-Middle-und-ohne-Code-auf-dem-Zielsystem-9775311.html

Wenn man eine #Sicherheitslücke gefunden hat und die #Bahn mal wieder länger braucht, kann man auch ein #Musikvideo im Zug drehen:

"c0de - SnailLoad (A Parody Song)"
https://www.youtube.com/watch?v=oQpbSbeAJ2I

(Details gibt es unter https://snailload.com/ - hab aber noch nicht tiefer reingeschaut)

#SnailLoad #YouTube

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Looking forward to present #SnailLoad at #BlackHatUS, together with @lavados:
https://www.blackhat.com/us-24/briefings/schedule/#snailload-anyone-on-the-internet-can-learn-what-youre-doing-38797
(2/3)

Announcing SnailLoad, the first fully remote website- and video-fingerprinting attack working via arbitrary TCP connections.
SnailLoad does not require any attacker code on the victim machine, any TCP connection is enough.

Great collaboration with Roland Czerny, Jonas Juffinger, Fabian Rauscher, @silent_bits and @lavados.

See the website for the full paper and a live demo: https://www.snailload.com
(1/3)

#SnailLoad #sidechannel #networksecurity