SUMMARY:
Zloader, a banking malware that has borrowed some functions from Zeus was recently observed being distributed through COVID-19-themed phishing scams.
They’re using PDF files that link to a Microsoft Word document laced with macro code that downloads and runs a version of the Zloader.
It uses web injects to steal credentials and private banking information from victims along with sensitive data stored in browsers, like cookies and passwords.
The threat actor uses this data to log into the victim’s online banking account. Using a Virtual Network Computing client, they make transactions from the compromised computer.
They started using COVID-19- themed phishing pretending to warn recipients of scams related to the new coronavirus pandemic example as follows.
POINTS TO ALWAYS REMEMBER
Users should not open attachments or web links within irrelevant emails that are received from unknown, suspicious addresses.
Users should avoid downloading or updating software from third-party or P2P websites.
Users should employ powerful anti-malware software and perform a full system scan. As a precaution,
Users should also frequently change their passwords for financial accounts.
Always report any cybercrime to your nearest police station or alternatively report it on www.cybercrime.gov.in
|| STAY CYBER SAFE ||
