you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 years ago* (4 children)

Yes. The prompt asking you if you wanted to do it or not would come up next. Unless they figured out some sneaky way to do something to avoid using admin.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 21 points 2 years ago

    Deploy a user-level payload that is auto started on login. The computer is now part of the botnet and can already be used for useful ops. Deploy a privilege escalation payload later if needed.

  • source
  • parent
  • [–] 13 points 2 years ago* (last edited 2 years ago) (2 children)

    90% of users when they are presented with the UAC popup when they do something:

    "Yes yes whateverrr"

  • source
  • parent
  • hideshow 2 child comments
  • [–] -2 points 2 years ago (1 child)

    🤷‍♂️ people are going to take the path of least resistance

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 years ago

    It would be trivial to add a "please click 'yes' to the UAC prompt to allow verification" screen, so that isn't really going to stop anyone.

    I've seen a bit of office malware in the past that did that, where it had a bunch of images instructing you to enable macros and that.

  • source
  • parent