DDoS Protection Weaponized to Deliver RATs

guest · Aug 22, 2022

August 22, 2022

Security researchers have discovered a new threat campaign designed to trick users into downloading malware capable of hijacking their machine.

Discovered by Sucuri, the attacks begin with a malicious JavaScript injection designed to target WordPress sites, resulting in a fake Cloudflare DDoS protection pop-up.
Click to expand...

These have become increasingly popular over recent years as website owners struggle to detect legitimate users from pervasive bot traffic.

“Since these types of browser checks are so common on the web many users wouldn’t think twice before clicking this prompt to access the website they’re trying to visit. However, the prompt actually downloads a malicious .iso file onto the victim’s computer,” Sucuri said in a blog post.
Click to expand...

The malware in question was identified as the NetSupport RAT, linked to ransomware campaigns and downloads of data-stealing malware RacoonStealer.

“The infected computer could be used to pilfer social media or banking credentials, detonate ransomware, or even entrap the victim into a nefarious ‘slave’ network, extort the computer owner, and violate their privacy – all depending on what the attackers decide to do with the compromised device,” warned Sucuri.
“RATs are regarded as one of the worst types of infections that can affect a computer as it gives the attackers full control over the device,” Sucuri concluded.
Click to expand...

Sucuri: Fake DDoS Pages On WordPress Sites Lead to Drive-By-Downloads

Under normal circumstances, DDoS pages usually don’t affect users much — they simply perform a check or request a skill testing question in order to proceed to the desired webpage. However, a recent surge in JavaScript injections targeting WordPress sites has resulted in fake DDoS prevent prompts which lead victims to download remote access trojan malware.
Click to expand...

Log in or Sign up

DDoS Protection Weaponized to Deliver RATs

guest Guest

Log in or Sign up

DDoS Protection Weaponized to Deliver RATs

guest Guest

Useful Searches