Microsoft Windows .Reg File / Dialog Box Message Spoofing
Posted by deepcore on March 13, 2019 – 8:15 pm
The Windows registry editor allows specially crafted .reg filenames to spoof the default registry dialog warning box presented to an end user. This can potentially trick unsavvy users into choosing the wrong selection shown on the dialog box. Furthermore, we can deny the registry editor its ability to show the default secondary status dialog box (Win 10), thereby hiding the fact that our attack was successful.
Post a reply
You must be logged in to post a comment.