1.    08 May 2016 #1
    Join Date : Oct 2013
    Posts : 25,663
    64-bit Windows 10 Pro build 17046

    How was Windows Store app able to download adware to a Windows 10 PC?


    Apps from the Windows Store run in a highly restricted sandbox and have to be approved before they can be listed. So why was this app able to automatically download an executable file that multiple virus scanners identified as potentially dangerous?

    One of the biggest selling points of the Windows Store is its promise of safety. Apps have to be approved to make it into the store, and the sandbox in which apps run should prevent them from causing any damage or installing malware or unwanted software.

    That doesn't mean developers can't try shady tricks. But their options are extremely limited, which is why I was surprised to find an app in the Windows Store last week that actually succeeded in downloading adware to a Windows 10 PC.

    An unsophisticated user might have been fooled into going one step further and running that software, resulting in the installation of an annoying piece of adware and potentially much worse...


    Source: How was this Windows Store app able to download adware to a Windows 10 PC? | ZDNet
      My ComputersSystem Spec
  2.    09 May 2016 #2
    Join Date : Oct 2014
    Trnava
    Posts : 2,944
    10.4 Home 1709 x64

    The author got a little overexcited. For starters it is PUP, secondly, it merely opened a link, the browser downloaded it, so no sandbox was breached. I guess, that the proclaimed update downloaded some script, which caused a link to open.
      My ComputerSystem Spec
  3.    09 May 2016 #3
    Join Date : Apr 2015
    Posts : 12,942
    W10Prox64

    Quote Originally Posted by TairikuOkami View Post
    The author got a little overexcited. For starters it is PUP, secondly, it merely opened a link, the browser downloaded it, so no sandbox was breached. I guess, that the proclaimed update downloaded some script, which caused a link to open.
    Yes, but the MS apps are supposed to be "safe". This one reached outside the sandbox in an attempt to harm the system.
      My ComputerSystem Spec
  4.    09 May 2016 #4
    Join Date : Oct 2014
    Trnava
    Posts : 2,944
    10.4 Home 1709 x64

    The problem is, that it is a download app. The app itself and its content are sandboxed, but not, what it downloads.
    Just like a browser, eg Chrome, it is sandboxed, but a user can download any malware and run it, sandbox does not apply.
      My ComputerSystem Spec
  5.    09 May 2016 #5
    Join Date : Apr 2015
    Posts : 12,942
    W10Prox64

    Quote Originally Posted by TairikuOkami View Post
    The problem is, that it is a download app. The app itself and its content are sandboxed, but not, what it downloads.
    Just like a browser, eg Chrome, it is sandboxed, but a user can download any malware and run it, sandbox does not apply.
    Correct, but it gives a false sense of security to unsuspecting, every-day-novice users.
      My ComputerSystem Spec
  6.    09 May 2016 #6
    Join Date : Oct 2014
    Trnava
    Posts : 2,944
    10.4 Home 1709 x64

    Quote Originally Posted by simrick View Post
    Correct, but it gives a false sense of security to unsuspecting, every-day-novice users.
    Well so do security companies and people then act surprised, how could they get infected with AV installed.
    Accidents happen, but they help to improve safety, I guess, that MS will respond by some nice improvements.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
I can't download any rented movies from the Windows Store
I keep getting this message. I Googled it, and some solutions say to check permissions. I did, and I already have full control. 50840
General Support
Windows 10 Store Doesn't Let Me Download Anything
I just upgraded from 8.1, to windows 10 today. Everything seems fine at the moment, except when I open the store, and try to download an app, I go to the page and it gives me this constant 'loading sign'. http://i.imgur.com/q1rc2tz.png It...
Software and Apps
Why do my songs bought in Windows 10 store not download?
Hi - I have purchased a few songs on Windows 10 store and pressed download to have them on my PC for offline listening / transferring to MP3 player. However, although a blue box appears in the top right corner of the screen in Groove Music telling...
Software and Apps
Unable to download anything from windows 10 store! :(
Hi, I bought a Dell inspiron I15RV laptop 2 years ago. It had windows 8, i upgraded to windows 8.1. The store was working fine. I was able to download apps and games. But unfortunately, few months ago my store stopped working. I tried almost...
Software and Apps
Unable to download anything from Windows 10 Home App store :(
Hi, I bought a Dell inspiron I15RV laptop 2 years ago. It had windows 8, i upgraded to windows 8.1. The store was working fine. I was able to download apps and games. But unfortunately, few months ago my store stopped working. I tried almost...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:53.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums