Watch out Windows & MS Office users targeted by new malware

TLDR:

Key Points:

• A new malware campaign is targeting Windows and Microsoft Office users through cracked software, distributing RATs and coin miners.
• The malware employs advanced techniques for persistence, making it difficult to remove and block.

A sophisticated malware campaign has been identified, targeting Windows and Microsoft Office users through cracked software. This campaign distributes Remote Access Trojans (RATs) and coin miners, posing significant risks to personal and organizational cybersecurity. The malware employs advanced techniques for persistence, making it difficult to remove and block. Symantec has identified several indicators of compromise associated with this campaign, which help detect and block the malicious activities initiated by this malware. The malware variants identified in this campaign are effectively detected and blocked by existing policies within VMware Carbon Black products. The campaign also utilizes downloader malware and Trojan horses, part of a broader strategy that uses advanced machine learning-based detection mechanisms to identify and neutralize potential threats. The operation’s web-based component ensures that attempts to communicate with command and control servers or download additional malicious payloads are blocked, further protecting users from the campaign’s reach. Users are urged to download software only from official vendor websites and to employ robust cybersecurity measures to protect against such sophisticated threats.