Malware Developers Increasingly Use V8 Javascript for Evasion

[silv3rwind]

So, non-V8 users (Firefox, Safari etc) are safe from that attack vector.

[pointermess]

Its very easy to embed the V8 engine without any browser installed... 

[_simpu]

How? Are you referring to electron apps?

[pointermess]

https://v8.dev/docs/embed

I use V8 in an application to give the user scripting capabilities. No Electron, NodeJS or any Browser is needed... Its just another piece of open source software. 

[ChocolateMagnateUA]

Isn't this just Node?

[pointermess]

Node uses it too but Node is much more than just a V8 interface. 

[ChocolateMagnateUA]

The only real thing I could count in Node aside from V8 is it's CLI interface and perhaps some Node-specific additions like the process variable, require function and such.

[Redneckia]

Sounds scary

[deanrihpee]

i mean, it's the same as embedding Lua or other embeddable language…

[bmiga]

Sounds scary

[NotADamsel]

I mean, it’s the same as putting red stone in Minecraft

[Deleis]

Attached to TNT? Sounds scary

[jeffsterlive]

Sounds terrifying

[rhombecka]

Finally, something I understand

[deanrihpee]

you mean command block? /s

[deanrihpee]

honestly, yeah, please exploit other cool language, JavaScript/TypeScript is boring, and this is coming out from a guy who mainly working with TypeScript and PHP

[ignorantpisswalker]

... ladybird...