And then for the attacker to do anything damaging to the computer they need to trick you into revealing your sudo/admin password, right?
On a default Unix-like desktop shell you can’t really do much permanent harm without elevating your permissions.
On a default Unix-like desktop shell you can’t really do much permanent harm without elevating your permissions.
alias sudo='./.my-evil-sudo-binary'
Also even without root dumping .ssh and the browser’s cookie jar is probably plenty to achieve lateral movement and you don’t need root for that.