‘DarkGate’ password-stealer could open up world of hurt for Windows users

guest · Nov 14, 2018

‘DarkGate’ password-stealer could open up world of hurt for Windows users
November 14, 2018
https://www.scmagazine.com/home/sec...ould-open-up-world-of-hurt-for-windows-users/

Windows users in Europe are the target of a sophisticated new malware campaign that provides attackers with a diverse array of capabilities, including cryptomining, credential stealing, ransomware and remote-access takeovers.

So far, the campaign has focused largely on users in Spain and France, according to a Nov. 13 blog post from endpoint security company enSilo, whose researcher Adi Zeligson discovered the threat.

DarkGate’s password-stealing component uses NirSoft tools to swipe user credentials, browsers cookies, browser history and Skype chats, enSilo reported. But the attackers seem to clearly favor cryptocurrency credentials [...]

Aside from its versatility, DarkGate is also notable in that it practices the act of process hollowing [...] The malware also takes measures to avoid detection by monitoring for conditions typically found in a sandbox or VM environments
Click to expand...

Dragon1952 · Aug 28, 2023

https://www.malwarebytes.com/blog/t.../darkgate-reloaded-via-malvertising-campaigns

Rasheed187 · Oct 22, 2023

I suppose this stuff is designed to bypass AV's. A good anti-logger would easily tackle this though. And a firewall could most likely also handle this, unless DarkGate is designed to bypass firewalls.

DarkGate Malware Spreading via Messaging Services Posing as PDF Files

A piece of malware known as DarkGate has been observed being spread via instant messaging platforms such as Skype and Microsoft Teams.

In these attacks, the messaging apps are used to deliver a Visual Basic for Applications (VBA) loader script that masquerades as a PDF document, which, when opened, triggers the download and execution of an AutoIt script designed to launch the malware.
Click to expand...

https://thehackernews.com/2023/10/darkgate-malware-spreading-via.html

Log in or Sign up

‘DarkGate’ password-stealer could open up world of hurt for Windows users

guest Guest

Dragon1952 Registered Member

Rasheed187 Registered Member

Log in or Sign up

‘DarkGate’ password-stealer could open up world of hurt for Windows users

guest Guest

Dragon1952 Registered Member

Rasheed187 Registered Member

Useful Searches