In the trammel of 2018, hackers infected Russian-language News sites alongside the banking Trojan Buhtrap. The virus was spreading through watering-hole attacks.
Criminals hid the virus on the primary pages of many Russian-language News sites. Employees of Financial Departments of unlike organizations convey choke their victims. The primary piece of occupation of cybercriminals was to pocket coin from the accounts of legal entities.
Experts of Kaspersky Lab reported on the instant assail on the website of the famous Russian media. Name of the resources is unknown. Hackers hid malicious code on all pages of the site. It redirects visitors to a landing page alongside the exploit pack.
Hackers are using novel exploits for CVE-2018-8174 vulnerabilities (bug inward Internet Explorer) in addition to CVE-2018-8120 (privilege escalation inward Windows).
In addition, cyber criminals used obfuscation script. It complicates the processes of analysis in addition to detection of the virus.
Like the end time, hackers used gratuitous SSL\TLS certificates "Let's Encrypt".
The researchers concluded that hackers improved the character of work. For example, hackers for the showtime fourth dimension used an exploit for a novel vulnerability inward Internet Explorer. This increases the chances to infect the victims alongside the banking Trojan. It's specially unsafe because the famous Russian media alongside millions of readers volition spread the virus.
Criminals hid the virus on the primary pages of many Russian-language News sites. Employees of Financial Departments of unlike organizations convey choke their victims. The primary piece of occupation of cybercriminals was to pocket coin from the accounts of legal entities.
Experts of Kaspersky Lab reported on the instant assail on the website of the famous Russian media. Name of the resources is unknown. Hackers hid malicious code on all pages of the site. It redirects visitors to a landing page alongside the exploit pack.
Hackers are using novel exploits for CVE-2018-8174 vulnerabilities (bug inward Internet Explorer) in addition to CVE-2018-8120 (privilege escalation inward Windows).
In addition, cyber criminals used obfuscation script. It complicates the processes of analysis in addition to detection of the virus.
Like the end time, hackers used gratuitous SSL\TLS certificates "Let's Encrypt".
The researchers concluded that hackers improved the character of work. For example, hackers for the showtime fourth dimension used an exploit for a novel vulnerability inward Internet Explorer. This increases the chances to infect the victims alongside the banking Trojan. It's specially unsafe because the famous Russian media alongside millions of readers volition spread the virus.
