تقوم البرامج الضارة BluStealer بسرقة العملات المشفرة وتنتشر عبر رسائل البريد الإلكتروني التصيدية

Avast analysts talked about a malicious spam campaign spreading BluStealer malware that steals cryptocurrency.

This info-stealer is designed topullBitcoin, Ethereum, Monero and Litecoin) from popular walletsArmoryDB, Bytecoin, Jaxx Liberty, Exodus, Electrum, Atomic, Guarda and Coinomi.

In total, experts tracked more than 12,000 phishing emails around the world.

phishing emails

In mid-September, ال Avast Threat Intelligence team recorded a surge in malicious activityphishing emails using the names of the shipping company DHL and the Mexican metallurgical company General de Perfiles, and distributing the BluStealer البرمجيات الخبيثة.

example of a phishing email
An example of a phishing email

كقاعدة, in such messages it is said that a certain parcel was delivered to the head office of the company due to the absence of the recipient on the spot. التالي, the recipient is asked to fill out the attached document in order to transfer the delivery. When the user tries to open it, the BluStealer installation starts.

In phishing campaigns associated with General de Perfiles, recipients receive emails stating that they have overpaid their bills and that some credit has been saved for them, which will be included in the invoice of the next purchase. As in the campaign imitating DHL, the General de Perfiles message contains BluStealer as an attachment.

The countries most affected by BluStealer are Russia, ديك رومى, USA, Argentina, المملكة المتحدة, إيطاليا, Greece, Spain, فرنسا, Japan, India, Czech Republic, Brazil and Romania. لذا, Russian users received 139 such letters.

A large number of malware samples studied by Avast belonged to one specific campaign, which was identified by the unique .NET downloader. على سبيل المثال, spam messages contained .iso attachments and download URLs. These attachments contain executable malware files packaged using the mentioned .NET loader.

BluStealer combines the functionality of a keylogger and document downloader, and also steals cryptocurrency: it can steal data from cryptocurrency wallets, such as private keys and credentials, as a result of which the victim can lose access to their assets.Avast researchers say.
BluStealer is also able to detect cryptocurrency addresses copied to the clipboard and replace them with those previously set by the cybercriminals. نتيجة ل, the cryptocurrency ends up in the hands of cybercriminals, and not where the transfer was actually made.

Let me remind you that I also told that BulletProofLink Cybercrime Offers Phishing as a Service.

هيلجا سميث

كنت دائمًا مهتمًا بعلوم الكمبيوتر, خاصة أمن البيانات والموضوع, وهو ما يسمى في الوقت الحاضر "علم البيانات", منذ سنوات مراهقتي المبكرة. قبل الانضمام إلى فريق Virus Removal كرئيس تحرير, عملت كخبير في الأمن السيبراني في العديد من الشركات, بما في ذلك أحد مقاولي أمازون. تجربة أخرى: لقد حصلت على التدريس في جامعات أردن وريدينج.

اترك رد

هذا الموقع يستخدم Akismet للحدّ من التعليقات المزعجة والغير مرغوبة. تعرّف على كيفية معالجة بيانات تعليقك.

زر الذهاب إلى الأعلى