About this question
Is fb2 & epub files can be malicious like pdf? If yes, how can I detect it manually?
Is fb2 & epub files can be malicious like pdf? If yes, how can I detect it manually?
Log in to share your answer and help other learners.
Log in to answerBest Answer · By JanBask Cyber Security Expert
Answered on Mar 29, 2022
What is EPUB? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. Is Epub safe?
Yes it can. (You can read this - https://www.baldurbjarnason.com/notes/epub-javascript-security/) Here is another example of how epub had security flaw in past: XML External Entities Are epub files often used by malware authors? No. Compared to PDF and other formats epub is rarely used by attackers. If you want to detect suspicious content (i.e. JavaScript) manually you can start with any hex editor and then you can write your own yara rules if it's needed. Of course if JavaScript is present that doesn't mean it has to be malicious but it can be a subject of further investigation.
Search in header of file for:
6D 69 6D 65 74 79 70 65 61 70 70 6C 69 63 61 74 69 6F 6E 2F 65 70 75 62mime type application/epub
or:
74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74
text/javascript
More about epub/epub2 and epub3 go here - http://epubzone.org/news/epub-3-and-interactivity
Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.
Step-by-step Cyber Security guides from industry experts
Common Cyber Security interview questions, answered
Guides, tips and career advice on Cyber Security from JanBask experts.
Cyber Security Prepare with 100 Cyber Security Interview Questions & Answers
Boost your interview confidence learn answers to 101 common cybersecurity questions, from basics to advanced techniques.
Cyber Security AI in Cybersecurity: The Double-Edged Sword
Explore how AI is reshaping cybersecurity as a double-edged sword. Learn how attackers use AI for sophisticated threats and how…
Cyber Security Exploring the Advantages and Disadvantages of Ethical Hacking
Discover the key advantages and disadvantages of ethical hacking from enhancing security and regulatory compliance to potential…
Cyber Security Top Cyber Security Projects Ideas to Consider in 2025
Explore 19 practical cybersecurity project ideas for 2025, from AI threat detection to honeypots. Build skills, boost your…