Password Thief RedLine Stealer Continues Its Triumphant March around the Planet

ہیلگا اسمتھمئی 2, 2022آخری تازہ کاری: مئی 14, 2022
45 1 منٹ پڑھیں

Bitdefender information security company specialist spoke about the campaign discovered at the beginning of this year to distribute the RedLine Stealer password thief.

The vast majority of stolen credentials sold on two large underground darknet marketplaces are collected using the RedLine Stealer malware.Insikt Group experts recently said.

This month alone, cybercriminals carried out 10,000 attacks in more than 150 countries and regions around the world, including the United States, Germany, Egypt, China, and Canada. البتہ, the actual number of attacks may be higher, as the experts only took into account the number of notifications from Bitdefender’s security solutions.

By the way, we also talked about this malware in the article: RedLine Stealer malware is the main source of credentials in two major marketplaces.

RedLine Stealer is a password stealing software that can be bought on hacker forums at a very low price. During the campaign detected by Bitdefender, malware is distributed using the RIG Exploit Kit through the CVE-2021-26411 vulnerability in Internet Explorer.

Judging by the number of countries attacked, the infostealer is not geared towards attacks on any particular country.

When executed on the attacked system, RedLine Stealer searches for usernames, as well as information about hardware, installed browsers and antivirus solutions, and extracts data such as passwords, saved bank card data, cryptocurrency wallets, credentials for VPN services, وغیرہ.

When executed, RedLine Stealer performs recon against the target system (including username, hardware, browsers installed, anti-virus software) and then exfiltrates data (including passwords, saved credit cards, crypto wallets, VPN logins) to a remote command and control server.Bitdefender specialits say.

Password thief RedLine Stealer
Data stolen by RedLine Stealer

With RedLine Stealer, hackers can extract credentials from browsers, FTP clients, email apps, instant messengers, and VPN services, and sell them on the dark web.

Stolen corporate data such as user credentials regularly ends up on paste sites and dark web channels, allowing cybercriminals to purchase the data, and potentially use it to gain access to an organization’s network or systems.the researchers say and advise users be stricter about data security.
ٹیگز
ہیلگا اسمتھمئی 2, 2022آخری تازہ کاری: مئی 14, 2022
45 1 منٹ پڑھیں

ہیلگا اسمتھ

مجھے ہمیشہ کمپیوٹر سائنسز میں دلچسپی تھی۔, خاص طور پر ڈیٹا سیکیورٹی اور تھیم, جسے آج کل کہا جاتا ہے۔ "ڈیٹا سائنس", میری ابتدائی نوعمری سے. ایڈیٹر ان چیف کے طور پر وائرس ہٹانے والی ٹیم میں آنے سے پہلے, میں نے کئی کمپنیوں میں سائبر سیکیورٹی کے ماہر کے طور پر کام کیا۔, ایمیزون کے ٹھیکیداروں میں سے ایک سمیت. ایک اور تجربہ: مجھے آرڈن اور ریڈنگ یونیورسٹیوں میں پڑھانا ملا ہے۔.

جواب چھوڑیں

یہ سائٹ سپیم کو کم کرنے کے لیے Akismet کا استعمال کرتی ہے۔. جانیں کہ آپ کے تبصرے کے ڈیٹا پر کیسے کارروائی کی جاتی ہے۔.

واپس اوپر کے بٹن پر