Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Windows malware delays coinminer install by a month to evade detection

Windows malware delays coinminer install by a month to evade detectionPost Views: 36 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A new malware campaign disguised as Google Translate or MP3 downloader programs was found distributing cryptocurrency mining malware across 11 countries.The fake applications are being distributed through legitimate free software sites, providing broad exposure to the malicious applications to both regular visitors of the sites and search engines.

According to a report by Check Point, the malware is created by a developer named ‘Nitrokod,’ which at first look appears to be clean of malware and provides the advertised functionality.

However, Check Point says the software purposely delays the installation of the malicious malware components for up to a month to evade detection.
https://www.bleepstatic.com/images/news/u/1220909/Website%20snaps/free-software.png
Infection chainIndependently of which program is downloaded from the Nitrokod website, the user receives a password-protected RAR that evades AV detection and contains an executable named after the selected app.

Upon running the file, the software is installed on the user’s system along with two registry keys.

https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/system-report.png
___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Windows malware delays coinminer install by a month to evade detection | Black Hat Ethical Hacking

A new malware campaign disguised as Google Translate or MP3 downloader programs was found distributing cryptocurrency mining malware across 11 countries.

6 viewsedited 10:20

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Windows malware delays coinminer install by a month to evade detection Windows malware delays coinminer install by a month to evade detectionPost Views: 36 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads…

found.
https://www.bleepstatic.com/images/news/u/1220909/Diagrams/attack-chain(3).png
Trending: Common and Uncommon types of SQL Injection
Trending: Offensive Security Tool: WEF (WiFi Exploitation Framework) How to stay safeCrypto-mining malware can be a risk as it can damage hardware by causing hardware stress and overheating, and can impact the performance of your computer by using additional CPU resources.

Additionally, the malware droppers discovered by Check Point can swap the final payload with something much more dangerous at any time.

To protect yourself, avoid downloading apps that promise functionality not officially released by the original developer, such as a desktop version of the Google translate tool.
Trending: WordPress sites hacked with fake Cloudflare DDoS alerts pushing malware
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-2-2-300x150.png Critical command injection vulnerability discovered in Bitbucket Server and Data CenterAugust 29, 2022
Reading Time: 2 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-4-300x150.png Twilio hackers hit over 130 orgs in massive Okta phishing attackAugust 26, 2022
Reading Time: 5 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-8-300x150.png Hackers use AiTM attack to monitor Microsoft 365 accounts for BEC scamsAugust 25, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-3-300x150.png GitLab patches critical remote code execution bugAugust 24, 2022
Reading Time: 2 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Windows malware delays coinminer install by a month to evade detection first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

6 viewsedited 10:20

Hacking Articles Tips Tricks Videos Tutorials

SSRF — Exploitation 02

Successful Cyberattacks often start at the “Network Perimeter”.Continue reading on InfoSec Write-ups »
Read more...

6 views10:37

Hacking Articles Tips Tricks Videos Tutorials

5 views11:42

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
The Simple Formula for Success in Zero Trust

https://cdn-images-1.medium.com/max/1200/1*gCvHJhGTJmMiAraZjHJeRQ.png
The rapid increase in the number of user devices and data moving out of the enterprise perimeter and the zone of control. As a result, the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

The Simple Formula for Success in Zero Trust

The rapid increase in the number of user devices and data moving out of the enterprise perimeter and the zone of control. As a result, the…