Microsoft’s cloud services are scanning password protected ZIP archives

Topic

New Reply

https://www.ghacks.net/2023/05/16/microsofts-cloud-services-are-scanning-password-protected-zip-archives/

Microsoft cloud services, including OneDrive and SharePoint, have started to scan password protected ZIP archives that users upload or share using these services…

Security researcher Andrew Brandt revealed on Monday that Microsoft started to scan password protected zip archives on SharePoint. He noticed that Microsoft started to flag some of his uploaded malware samples, contained in password protected zip archives, as malware…

2 users thanked author for this post.

Cybertooth, NaNoNyMouse

Reply | Quote

Replies

If you use poor security…

The good old saying that files stored in the cloud should be considered accessible by others still holds, even though strong password protection may help protect files from being accessed for now.

cheers, Paul

1 user thanked author for this post.

NaNoNyMouse

Reply | Quote

They are just scanning the hashes, not “reading the files”

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Paul T wrote:

If you use poor security

How does Microsoft crack the passwords ?

Reply | Quote

https://threadreaderapp.com/thread/1658373432562597889.html
Good explanation there.

Susan Bradley Patch Lady/Prudent patcher

2 users thanked author for this post.

windbg, Alex5723

Reply | Quote

The only thing encrypted in the ZIP archive is the compressed image of the file. The meta data – file names, length, etc. – are in the clear. That’s why you can list the contents of a ZIP archive even if password-protected; you need the password only to extract files from it.

Reply | Quote