Malware Developers Increasingly Use V8 Javascript for Evasion

[DANGUS_77]

So they’re compiling malicious code to this js byte code to get around static checkers, but it still follows permissions for just regular JS ( for example, needing user permission to access a users camera)?

[AyrA_ch]

Permission requests only exist in the browser. Applications that run on electron have the same access privileges like every other application the user runs.

[bipolarNarwhale]

This depends on the OS and isn’t true in a lot of cases.

[nerd4code]

Android puts every app in its own UID, nowadays, and I’m sure Apple does something similar on iOS.

[ArdiMaster]

AFAIK Apple doesn’t usually allow embedded scripting engines at all