[Exploit0000]

Is it possible to infect machines just by creating a website, where when people visit it, malware is installed without any visible installation process? Or can it simply steal cookies, usernames, and passwords from the person's browser just by them entering the site, without needing to download or execute anything other than opening the URL?

[pinkmonsterlemonade]

The short answer is yes, in theory this is very much possible.
It is also one of the many reasons you should disable java-script when using tor.

Most of the time a vulnerability in your browser gets exploited and some code will be executed in the background. Hence downloading a file over said browser isn't necessary anymore. You get infected "drive-by".

Is it likely to happen, or can you create something like this?
Probably not.
1) If your asking such a question you are not skilled enough to find such a vulnerability.
2) Such an exploit is very valuable and rare, therefore it is more and more unlikely that you encounter one in the wild targeting every user visiting a site, cause then there is a higher chance people notice and in the end it gets fixed.

but:
It is still definitely possible that people with such an exploit will run a malware campaign on some "adult video" websites or so and try to target as many machines as possible, you never know and in the end they decide what they are going to do with the exploit. Its just my opinion that this is the more unlikely scenario.

tldr: it is possible, stay safe, dont be stupid. And being honest: in the end you really can't do much against it

[dataisdata]

yes i think its done before a link then connected in a RAT
its easy to infect before compare now

[medea]

yeah 100% possible, you just need to know how to do it

[N37rUNN3r]

Take a look at ClickFix attacks, it just requieres the user to access a link and via social engineering make him execute a command in powershell

[Bluke23]

yes it is very much possible

[DredgenSun]

Are infected jpegs still a thing?

[FinalDestiny]

Yeah, it's possible.

As I messed around in the past with stuff like "BeEF", it can give you overall insights, as you can easily mess around even on IOS, Android with it.

---

Are infected jpegs still a thing?

Probably some horny Indian would fall for it.

[DredgenSun]

Yeah, it's possible.

As I messed around in the past with stuff like "BeEF", it can give you overall insights, as you can easily mess around even on IOS, Android with it.

---

Are infected jpegs still a thing?

Probably some horny Indian would fall for it.

At least there's a market around for that lol

[nigerianclapper]

having control over a system by just thought power is technically possible. those who know will understand what i'm talking about