XWorm v5.6 Malware Being Distributed via Webhards
May 30, 2024, 3:32 p.m.
Description
Researchers discovered a campaign distributing the XWorm v5.6 malware disguised as adult games through Korean file-sharing platforms called webhards. The malware employs tactics like downloading encrypted components from command-and-control servers, injecting itself into legitimate processes, and conducting activities like keylogging, webcam data exfiltration, and additional malware downloads.
Tags
Date
- Created: May 30, 2024, 2:34 p.m.
- Published: May 30, 2024, 2:34 p.m.
- Modified: May 30, 2024, 3:32 p.m.
Indicators
- https://groundbreakingsstyle.com/wp-content/nanofolder/img-files/a95c346e-bd42-406b-a6a4-ed808e98bf67.res
- https://groundbreakingsstyle.com/wp-content/nanofolder/img-files/nacati.res
- https://diditaxi.kro.kr:1050
Additional Informations
- Korea, Democratic People's Republic of
- Korea, Republic of