Malware ZingoStealer didistribusikan di antara penjahat secara gratis

Cisco Talos experts telah ditemukan the ZingoStealer malware, which is distributed for free by the Haskers Gang hacker group.

The malware is able to steal confidential information and upload additional malware to infected systems. Misalnya, it can be RedLine Stealer and XMRig-based cryptocurrency mining malware called ZingoMiner.

Note: Let me remind you that we also talked about New Fodcha Botnet Attacks More Than 100 Korban Setiap Hari.

Haskers Gang has been active since at least January 2020, while ZingoStealer came out around the last month, according to analysts.

The communities in which the malware is distributed consist of thousands of participants and demonstrate that financial crimes in cybercrime are becoming more and more attractive to many people around the world. The main members of the criminal group Haskers Gang are likely to be in Eastern Europe, and many announcements and other messages are written in Russian.

Experts say the malware is constantly evolving and is mainly aimed at Russian-speaking victims.

While this stealer is freely available and can be used by multiple threat actors, we have observed a focus on infecting Russian speaking victims under the guise of game cheats, key generators and pirated software, which likely indicates a current focus on home users.Cisco Talos researchers note.

Misalnya, attackers post videos on YouTube advertising such tools, and add links to files hosted on Google Drive or Mega, which contain the ZingoStealer payload, in the description.

ZingoStealer malware for free

Cisco Talos also says that malware executables have been spotted on the Discord CDN, raising the possibility that the malware is spreading to game-related Discord servers as well.

By the way, you might also be interested that Mars’ new infostealer is being distributed via OpenOffice ads on Google.

In addition to collecting sensitive information such as credentials, cryptocurrency wallet information, and mining on victim systems, ZingoStealer is known to use Telegram to extract data and distribute updates. Selain itu, customers can pay about $3 to use the ExoCrypt cryptor, which allows bypassing anti-virus protection.

ZingoStealer malware for free

Pada saat yang sama, the report emphasizes that last week the Haskers Gang even announced that it was transferring ownership of ZingoStealer to another attacker, and also offered to sell the source code for a negotiated price of approximately $500.

Helga Smith

Saya selalu tertarik pada ilmu komputer, terutama keamanan data dan tema, yang disebut saat ini "ilmu data", sejak remaja awal saya. Sebelum masuk ke tim Penghapusan Virus sebagai Pemimpin Redaksi, Saya bekerja sebagai pakar keamanan siber di beberapa perusahaan, termasuk salah satu kontraktor Amazon. Pengalaman lain: Yang saya dapatkan adalah mengajar di universitas Arden dan Reading.

Tinggalkan Balasan

Situs ini menggunakan Akismet untuk mengurangi spam. Pelajari bagaimana data komentar Anda diproses.

Tombol kembali ke atas