Hypotheticaly if instead of searching for my old Ps2/Xbox360 discs i downloaded a rom could the emulated games infect my computer once ran? (if this breakes the rules im sory)
You must log in or # to comment.
For emulators which use recompilation techniques, I suppose it’s technically possible to make them execute malware. But writing your malware in legacy XBox/PlayStation code to embed it in roms would also make it some of the most sophisticated in history just to infect a handful of retrogamers so I think it’s very unlikely…
Search for some emulating communities and see what sites they have recommended. The ROMs aren’t dangerous, but there are dangerous sites that promise ROMs.
FMHY is always my starting point. They’re really good about removing recommendations that have the slightest hint of anything malicious.
Anything you download from unknown sites can be risky. You don’t even have to run the file in order to start the infection.
Practically: not really.
Theoreticaly: any piece of software loading external content can be exploited. Google Chrome, Windows Explorer, and iMessage have all had vulnerabilities where opening a file triggered remote code execution (and subsequently, infection).
Some emulators will read the code, interpret them, and call emulator code to execute what the instruction is supposed to do. This is relatively safe, but also not very fast.
Other emulators act more like browsers: they interpret some code, but turn other code into native code your computer can understand directly. This is riskier because someone could craft a ROM that’ll escape the emulator and act like a normal executable, with all the risks that come with that.
I don’t think emulators have many protections against malicious ROMs. Known vulnerabilities are patched, of course, but emulators aren’t written with the same risk model as we browsers.
If you want to be extra safe, you can try calculating the hash of the ROM you downloaded (SHA or MD5, you can find free software to do that for every operating system under the sun) and compare that to online databases. If you have the choice between ROMs with a hash you can find online and a ROM with a hash you can’t find, you should probably stick to the known hash.
If you want the utmost protection, you can set up a virtual machine (in VirtualBox or whatever you prefer), install an OS into that, and run the emulator in there. Getting the 3D graphics working reasonably fast in such a setup is fiddly and comes with a performance cost (or the cost of a whole second GPU lol) but you can shut down the virtual machine with the click of a button and reset it after you’re done and copied out your save file.
I think that’s probably overkill, but it’s the most secure way to open any content you download from the internet, whether you’re working with ROMs, Office documents, images, or videos. Even that solution isn’t bullet proof, but nothing really is.
Practically, yes. There was a zsnes exploit that did exactly this back in the day.
Was that malware ever injected into ROM websites? A whole bunch of emulators have had vulnerabilities fixed and PoC’s published, but I’m not aware of any malware groups using altered ROMs as an infection method. It’s probably much easier to infect people by hijacking emulator websites through malvertising.
Because all I know about the zsnes story was that there was a PoC and everybody kind of abandoned zsnes after that?
Its easier to just infect a crack for a popular game and get a ton of windows “power” users to install it.
Like others have said, any file can be dangerous. You need to be diligent in picking where your ROMs come from, if it’s a sketchy site don’t use it.
That being said I’ve been doing similar activities since I was like 12 years old and have got a virus exactly once, and it was completely my fault for not listening to my gut (disregarded some red flags because I really wanted something to work.)
