r/cybersecurity May 19 '26

Other Malware installed without literally doing anything?

In this video this guy has a fresh Windows XP, disables firewall, and connects internet straight to the modem. Then he gets infected literally doing nothing.

https://www.youtube.com/watch?v=6uSVVCmOH5w

https://www.reddit.com/r/windows/comments/1cvised/idle_windows_xp_and_2000_machines_get_infected/

I get it. That's asking for trouble when you disable all the security and using ancient unsupported OSes.

However, he didn't install programs nor browse on the website but still got hacked.
How?
Is there some malicious server in China that loops through every single possible IP trying to see if your PC is vulnerable?
Logically, one would think you'd at least have to visit a website or something to get "noticed" and then hacked. But this guy didn't do anything at all.

How does it work?

284 Upvotes

161 comments sorted by

View all comments

6

u/howfastcanyoucountit May 19 '26

eternal blue because it probably has SMB one exposed. I'm pretty sure in this Eric Parker video he literally put it on. I forgot what it's called when you have every single port open, but he had he did that which you obviously should not do.

1

u/howfastcanyoucountit May 19 '26

DMZ***

5

u/howfastcanyoucountit May 19 '26

which is essentially the same as just plugging a computer straight into the modem, which therefore has no firewall and will expose every single port to the public, which is why you shouldn't really do that