{"id":153111,"date":"2019-08-09T21:07:35","date_gmt":"2019-08-09T18:07:35","guid":{"rendered":"http:\/\/ww-vb.mine.nu\/w108\/researchers-uncover-a-new-piece-of-rat-malware-that-targets-cryptocurrency-users\/"},"modified":"2019-08-09T21:07:38","modified_gmt":"2019-08-09T18:07:38","slug":"researchers-uncover-a-new-piece-of-rat-malware-that-targets-cryptocurrency-users","status":"publish","type":"post","link":"https:\/\/hameed.nwar.uk\/sa\/researchers-uncover-a-new-piece-of-rat-malware-that-targets-cryptocurrency-users\/","title":{"rendered":"Researchers uncover a brand new piece of RAT malware that targets cryptocurrency customers"},"content":{"rendered":"<p> [ad_1]<br \/>\n<\/p>\n<div>\n<p>Researchers\u00a0at Zscaler ThreatLabZ\u00a0have recognized a brand new remote-access <span id=\"urn:enhancement-cf03923e-34d3-b793-e166-b0bd3fc3d0a9\">trojan<\/span> (RAT) referred to as Saefko, which retrieves <span id=\"urn:enhancement-f78b0470-77c0-cef1-e69d-d2f5687ee234\" class=\"textannotation disambiguated wl-thing\" itemid=\"http:\/\/data.thenextweb.com\/tnw\/entity\/google_chrome\">Chrome <span id=\"urn:enhancement-84c0e28b-7948-b3d1-78ec-8d6935dec0d7\">browser<\/span><\/span> historical past\u00a0in a seek for cryptocurrency-related exercise<\/p>\n<p>The RAT, written in .NET and out there for <span id=\"urn:enhancement-61d7ee48-4294-6103-49bd-203d16bd9d0f\">sale<\/span> on the <span id=\"urn:enhancement-6bf2266e-5383-2b2e-e05e-79ed7f2fc203\">darkish internet<\/span>, additionally seems for data referring to different <span id=\"urn:enhancement-7d34d620-5c29-4c78-1ba8-377db1023043\">actions<\/span> involving <span id=\"urn:enhancement-00d6c6a2-6c27-e699-e5f2-e1646c999a49\">bank cards<\/span>, <span id=\"urn:enhancement-59fea8e0-18a1-cb49-35b4-bc4a07ae750c\">enterprise<\/span>, social <span id=\"urn:enhancement-4e14b429-f66c-5df2-a66f-2d2c26d19009\">media<\/span>, <span id=\"urn:enhancement-5e3b3932-9455-1456-bb9d-4ddb664f0336\">gaming<\/span>, and on-line <span id=\"urn:enhancement-139b08c5-7bb0-f77a-e399-230a8a22a2c7\">procuring<\/span>.<\/p>\n<p>For context, a RAT is a sort of malware that <span id=\"urn:enhancement-e21f0503-6d1a-3b60-454b-ff3fc95aa311\">options<\/span> a <span id=\"urn:enhancement-e7a16b27-4b87-7b7c-3a2e-3e394292ef5d\">backdoor<\/span>, enabling perpetrators to remotely management a <span id=\"urn:enhancement-0666e8e3-cdc1-e85d-00b5-dcb3e727dc65\">gadget<\/span>.<\/p>\n<p>By remotely controlling a <span id=\"urn:enhancement-ad902da7-d239-219c-072f-1cdc2eec77cd\">gadget<\/span>, the intruder is ready to\u00a0surreptitiously monitor person habits, entry confidential data, activate a <span id=\"urn:enhancement-8111bac0-b465-4886-c29d-07d2058f99ff\">webcam<\/span>, take <span id=\"urn:enhancement-49b054b4-99ff-6172-4cc4-28e5e99158c4\">screenshots<\/span>, and format drives, amongst different issues.<\/p>\n<p>As soon as the RAT infects the <span id=\"urn:enhancement-d8eb3209-ecdc-793c-86c2-90bb91fa69b4\">gadget<\/span> it stays within the background, activating and executing each time the particular person logs in.<\/p>\n<p>The checklist of various <span id=\"urn:enhancement-dba79a83-b7e8-4502-a617-88fb46013826\"><span id=\"urn:enhancement-9e35df3e-b039-ff9a-6839-bdcca84d6496\" class=\"disambiguated wl-thing\" itemid=\"http:\/\/data.thenextweb.com\/tnw\/entity\/cryptocurrency\">cryptocurrency<\/span><\/span> classes Saefko searches for embody:<\/p>\n<figure class=\"post-image post-mediaBleed aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1235212 lazy\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"\" width=\"725\" height=\"520\" sizes=\"auto, (max-width: 725px) 100vw, 725px\" data-src=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/08\/Screen-Shot-2019-08-09-at-15.29.50.png\" data-lazy=\"true\" data-srcset=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/08\/Screen-Shot-2019-08-09-at-15.29.50.png 1432w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/08\/Screen-Shot-2019-08-09-at-15.29.50-280x201.png 280w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/08\/Screen-Shot-2019-08-09-at-15.29.50-376x270.png 376w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/08\/Screen-Shot-2019-08-09-at-15.29.50-188x135.png 188w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/08\/Screen-Shot-2019-08-09-at-15.29.50-796x571.png 796w\"\/><figcaption><a href=\"#\" data-url=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fthenextweb.com%2Fhardfork%2F2019%2F08%2F09%2Fresearchers-uncover-a-new-piece-of-rat-malware-that-targets-cryptocurrency-users%2F&amp;via=thenextweb&amp;related=thenextweb&amp;text=Check out this picture on: A list of cryptocurrency-related targets as compiled by Zscaler ThreatLabZ.\" data-title=\"Share A list of cryptocurrency-related targets as compiled by Zscaler ThreatLabZ. on Twitter\" data-width=\"685\" data-height=\"500\" class=\"post-image-share popitup\" title=\"Share A list of cryptocurrency-related targets as compiled by Zscaler ThreatLabZ. on Twitter\"><i class=\"icon icon--inline icon--twitter--dark\"\/><\/a>An inventory of cryptocurrency-related targets as compiled by Zscaler ThreatLabZ.<\/figcaption><\/figure>\n<p>In terms of defending your self towards Saefko, the standard recommendation applies.<\/p>\n<p>Don\u2019t obtain any <span id=\"urn:enhancement-3a773885-e452-f18c-c54d-8b9fa7608462\"><span id=\"urn:enhancement-a37677ec-759e-fc81-f622-7152051ffa11\">packages<\/span><\/span> or open any attachments from an untrusted supply. Block unused ports, change off unused <span id=\"urn:enhancement-04e03887-e8b0-20bd-eaa7-c7046fa063b8\"><span id=\"urn:enhancement-373daaba-26f1-7836-1ddf-2d2ac26b5545\">providers<\/span><\/span>, and monitor all outgoing <span id=\"urn:enhancement-185e803c-32b4-9cd4-b9e7-413790b822ed\"><span id=\"urn:enhancement-bb7ec3ce-b09a-8c3b-18bd-fb2f3db4ab48\">visitors<\/span><\/span>.<\/p>\n<p>And keep in mind that attackers are sometimes cautious, stopping the malware from doing an excessive amount of without delay, which might inevitably decelerate a <span id=\"urn:enhancement-f962241c-eee9-d510-6dc8-598210cb4298\"><span id=\"urn:enhancement-c69a3c89-cfc7-089b-9a09-a6c6d5781d0f\">gadget<\/span><\/span> and probably appeal to the your\u00a0<span id=\"urn:enhancement-9af25e69-9ea0-a57d-9f4a-89477683b2ac\"><span id=\"urn:enhancement-3a355421-d722-ffee-a184-f2fe0241cccd\">consideration<\/span><\/span>.<\/p>\n<p class=\"c-post-pubDate\">\n                                    Revealed August 9, 2019 \u2014 15:04 UTC\n                                <\/p>\n<\/p><\/div>\n<p><script async src=\"http:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><script data-src=\"http:\/\/connect.facebook.net\/en_US\/sdk.js#xfbml=1&amp;appId=378011798897423&amp;version=v2.6\" id=\"socialSrcFacebook\" type=\"text\/template\"><\/script><br \/>\n<br \/>[ad_2]<br \/>\n<br \/><a href=\"https:\/\/thenextweb.com\/hardfork\/2019\/08\/09\/researchers-uncover-a-new-piece-of-rat-malware-that-targets-cryptocurrency-users\/\">Supply hyperlink <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ad_1] Researchers\u00a0at Zscaler ThreatLabZ\u00a0have recognized a brand new remote-access trojan (RAT) referred to as Saefko, which retrieves Chrome browser historical past\u00a0in a seek for cryptocurrency-related exercise The RAT, written in .NET and out there for sale on the darkish internet, additionally seems for data referring to different actions involving bank cards, enterprise, social media, gaming, &hellip;<\/p>\n","protected":false},"author":1,"featured_media":153115,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-153111","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tie-world"],"_links":{"self":[{"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/posts\/153111","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/comments?post=153111"}],"version-history":[{"count":0,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/posts\/153111\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/media\/153115"}],"wp:attachment":[{"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/media?parent=153111"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/categories?post=153111"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/tags?post=153111"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}