Videos

Published on June 3rd, 2017 📆 | 4620 Views ⚑

0

Cyberattack – Beware! Fireball malware infect more than 250 million computers || Today Hacking News


TTS Demo


♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦
Thank You For Watching This Video
♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦♦
My Twitter Page :-
-------- https://twitter.com/JaydeepNashit --------
♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥♥
A Chinese digital marketer is to blame for the spread of malware called Fireball that reportedly has turned 250 million web browsers into ad-revenue generating “zombies” and infected 20 percent of corporate networks around the world.

The malware hijacks browsers and generates revenue for a Beijing-based digital marketing agency called Rafotech, said Check Point Software Technologies, which made the claim in a report published Thursday. Check Point calls this “possibly the largest infection operation in history,” and added that it can be turned into a distributor of any other malware family.

According to Check Point, victims are infected with Fireball via stealth installs bundled with desirable Rafotech apps such as Deal Wifi, Mustang Browser, Soso Desktop and FVP Imageviewer. Additionally, it has been distributed via third-party freeware and spam campaigns.

“It’s important to remember that when a user installs freeware, additional malware isn’t necessarily dropped at the same time. If you download a suspicious freeware and nothing happens on the spot, it doesn’t necessarily mean that something isn’t happening behind the scenes,” Check Point wrote.





Researchers also suspect Rafotech has bought computer installs for Fireball from others known for their questionable download tactics. In what Check Point said was an example of such activity, it provided a screen shot of a solicitation by a user with a @rafotech.com email address on an advertising forum stating “Looking to Buy LOTS of Desktop PPI Traffic/Installs” adding “we are looking for massive volume installs.”

Rafotech’s distribution methods appear to be illegitimate and do not follow standard advertising criteria for it to be considered naïve or legal, researchers said. “The malware and the fake search engines don’t carry indicators connecting them to Rafotech, they cannot be uninstalled by an ordinary user, and they conceal their true nature,” they wrote.


2017-06-03 13:08:24

source

Tagged with:



Comments are closed.