Bitbucket Abused to Infect 500,000+ Hosts with Malware Cocktail

guest · Feb 5, 2020

Bitbucket Abused to Infect 500,000+ Hosts with Malware Cocktail
February 5, 2020
https://www.bleepingcomputer.com/ne...o-infect-500-000-hosts-with-malware-cocktail/

Attackers are abusing the Bitbucket code hosting service to store seven types of malware threats used in an ongoing campaign that has already claimed more than 500,000 business computers across the world.

Systems falling victim to this attack would get infected with multiple payloads that steal data, mine for cryptocurrency, and culminate with delivering STOP ransomware.
Payloads downloaded thousands of times
According to research Cybereason published today, the targets are users looking for cracked versions of commercial software, "Adobe Photoshop, Microsoft Office, and others."
Looking at three Bitbucket repositories linked to each other by the same malware strains with the same names, the researchers noticed that sometimes the threat actor added updates as often as three hours.

The researchers estimate that more than 500,000 machines have been infected during this campaign, hundreds of them being compromised every hour.
Click to expand...

Cybereason: The Hole in the Bucket: Attackers Abuse Bitbucket to Deliver an Arsenal of Malware

In some ways, this attack takes persistent revenue to the next level. These attackers infect the target machine with different kinds of malware to get as much sensitive data as possible, alongside miner capabilities and ransomware capabilities. This attack is the epitome of “have your cake and eat it too”, with attackers layering malware for maximum impact.
Click to expand...

Log in or Sign up

Bitbucket Abused to Infect 500,000+ Hosts with Malware Cocktail

guest Guest

Log in or Sign up

Bitbucket Abused to Infect 500,000+ Hosts with Malware Cocktail

guest Guest

Useful Searches