XWorm v5.6 Malware Being Distributed via Webhards

Tags

External References

• https://asec.ahnlab.com/
• https://otx.alienvault.com/

Description

Researchers discovered a campaign distributing the XWorm v5.6 malware disguised as adult games through Korean file-sharing platforms called webhards. The malware employs tactics like downloading encrypted components from command-and-control servers, injecting itself into legitimate processes, and conducting activities like keylogging, webcam data exfiltration, and additional malware downloads.

Date