Resultados

2 casos · pág. 1/1

huntress.com · há 5h · 2 fontes · 2 atualizações high

Amazon-themed ClickFix malvertising abuses finger.exe to deliver Doina, Lumma Stealer and NetSupport RAT

A ClickFix malvertising campaign uses sponsored Google results for "amazon business" to lure victims to a fake Amazon login page on Google Sites and then to a fake CAPTCHA. The CAPTCHA pastejacks a command into the clipboard that the victim is told to run in the Windows Run box. The command abuses the legacy finger.exe utility to fetch a …

securelist.com · há 1d high

ValleyRAT backdoor distributed via trojanized QN Wallpaper adware installer using libcef.dll sideloading, likely Silver Fox

Kaspersky analysis of an installer first classified as adware (MD5 c24e99f9437feacaa63766a3cde3fe3d) found that it delivers the ValleyRAT backdoor. The installer drops a modified, signed Chinese wallpaper tool, QN Wallpaper, and uses it for DLL sideloading of a malicious libcef.dll. The adware's advertising function does not work. Attacke…

Silver Fox