Researchers uncover new attack vector: Subtitles

Discussion created by black_zion on May 25, 2017
Latest reply on Oct 1, 2017 by jemma213gh

Hackers Can Use Subtitles to Infect Your Devices | News & Opinion |

Enjoy watching foreign films? We have some bad news.


Security researchers have discovered a new attack vector that could allow online miscreants to gain access to your PC, mobile device, and smart TV: malicious subtitles. Researchers from security firm Check Point said "hundreds of millions" of devices running VLC, Kodi, Popcorn Time, and Stremio — four of the most popular media players out there — are at risk.


"Malicious subtitles could be created and delivered to millions of devices automatically, bypassing security software and giving the attacker full control of the infected device and the data it holds," Check Point vulnerability research team leader Omri Herscovici said in a statement.