April 2020’s Most Wanted Malware: Agent Tesla Remote Access Trojan Spreading Widely

guest · May 11, 2020

April 2020’s Most Wanted Malware: Agent Tesla Remote Access Trojan Spreading Widely In COVID-19 Related Spam Campaigns
May 11, 2020
https://blog.checkpoint.com/2020/05...ng-widely-in-covid-19-related-spam-campaigns/

Our latest Global Threat Index for April 2020 has found several COVID-19 related spam campaigns distributing a new variant of the Agent Tesla remote access trojan, moving it up to 3rd place in the Index, impacting 3% of organizations worldwide.

The new variant of Agent Tesla has been modified to steal Wi-Fi passwords in addition to other information – such as Outlook email credentials – from target PCs. During April, Agent Tesla was distributed as an attachment in several malicious COVID-19 related spam campaigns, which attempt to lure the victim into downloading malicious files under the cover of providing interesting information about the pandemic.
Click to expand...

The well-known banking trojan Dridex, which entered the Threat Index top ten for the first time in March, had an even greater impact in April. It moved up to 1st place in the index from 3rd last month, impacting 4% of organizations worldwide. XMRig, March’s most prevalent malware, dropped to second place.

Agent Tesla is a very advanced RAT, which can exfiltrate credentials from a range of common software, as well as logging user’s keyboard input and taking screenshots, so its impact can be truly catastrophic. With both Agent Tesla and Dridex in the top three of the threat index, criminals are focusing on stealing users’ personal and business data and credentials so that they can monetize them.
Click to expand...

The research team also warns that “MVPower DVR Remote Code Execution” remained the most common exploited vulnerability, though its impact increased to cover 46% of organizations globally. This was closely followed by “OpenSSL TLS DTLS Heartbeat Information Disclosure” with a global impact of 41%, followed by “Command Injection Over HTTP Payload” impacting 40% of organizations worldwide.

Top malware families
This month Dridex rises to 1st place, impacting 4% of organizations globally, followed by XMRig and Agent Tesla impacting 4% and 3% of organizations worldwide respectively. [...]
Click to expand...

Log in or Sign up

April 2020’s Most Wanted Malware: Agent Tesla Remote Access Trojan Spreading Widely

guest Guest

Log in or Sign up

April 2020’s Most Wanted Malware: Agent Tesla Remote Access Trojan Spreading Widely

guest Guest

Useful Searches