Can you get malware by simply visiting websites?

[hardtofindinthefuture]

Just wondering if i visit shady lookin sites like for example(shady sites, north Korean websites etc) Can i possibly get malware if nothing is actually visibly downloaded?

 

Thanks!

[Electronics Wizardy]

Technically possible, but very unlikely. If your doing this on purpose many times you should use a vm. If its on accident one or twice, your fine.

[2FA]

Yes, it's what is called a drive-by attack. They pretty much require Javascript, though browsers are highly sandboxed now so it's hard to get a virus that way to be honest unless you're going to REALLY sketchy sites, which if you are I would suggest doing that in an isolated VM.

[hardtofindinthefuture]

Just now, 2FA said:

REALLY sketchy sites

what would be the standard for that..

[2FA]

Just now, v0nn_toaster said:

what would be the standard for that..

Like non-indexed sites and ones that you just inherently question the safety of.

[Paddi01]

Keeping your browser up to date is the best you can do

[LtStaffel]

5 minutes ago, 2FA said:

Yes, it's what is called a drive-by attack. They pretty much require Javascript, though browsers are highly sandboxed now so it's hard to get a virus that way to be honest unless you're going to REALLY sketchy sites, which if you are I would suggest doing that in an isolated VM.

sandbox escapes are found everyday

[2FA]

1 minute ago, LtStaffel said:

sandbox escapes are found everyday

Violets are not actually blue.

[Murasaki]

are you gonna browse the deep web or something?

[hardtofindinthefuture]

Just now, Ross Scarlet said:

are you gonna browse the deep web or something?

nah

[KarathKasun]

Yes.

 

Java sandboxing is 100% broken since specter/meltdown.

 

Shady websites are likely to have the most effective attacks in their design.

[ScratchCat]

1 hour ago, v0nn_toaster said:

what would be the standard for that..

Use NoScript where possible if the website is not trustworthy. It disables script execution (e.g. the javascript mentioned earlier).

https://noscript.net/

[Psittac]

I've had it happen a couple times over the past decade, one time I even had a black boxed message appear on my screen, don't remember what it said but I just formatted my drive and reinstalled OS.  And the sketchiest thing I've done is go to regular porn sites and torrent.  It's been a few years since that happened but I'm pretty sure I got one from pornhub once.  It's very possible.

[LogicalDrm]

It is possible. Which is why you should always have up-to-date AV running. Sites can run scripts, just like visiting YT or any normal news site does. ActiveX, Javascript etc. Most will be blocked by browser or your AV. Or you get popup asking for running said script. If you run it, oh well.