Fake Microsoft DirectX 12 site pushes crypto-stealing malware

guest · Apr 24, 2021

Fake Microsoft DirectX 12 site pushes crypto-stealing malware
April 24, 2021
https://www.bleepingcomputer.com/ne...rectx-12-site-pushes-crypto-stealing-malware/

Cybercriminals have created a fake Microsoft DirectX 12 download page to distribute malware that steals your cryptocurrency wallets and passwords.

Even though the site comes complete with a contact form, privacy policy, a disclaimer, and a DMCA infringement page, there is nothing legitimate about the website or the programs it distributes.
Click to expand...

First discovered by security researcher Oliver Hough, when the fake DirectX 12 installers are launched, they will quietly download malware from a remote site and execute it

This malware is an information-stealing malware that attempts to harvest a victim's cookies, files, information about the system, installed programs, and even a screenshot of the current desktop.
All of the data is collected into a %Temp% folder, which the malware will zip up and send back to the attacker. The attack can then analyze the data and use it for other malicious activities.
Click to expand...

Log in or Sign up

Fake Microsoft DirectX 12 site pushes crypto-stealing malware

guest Guest

Log in or Sign up

Fake Microsoft DirectX 12 site pushes crypto-stealing malware

guest Guest

Useful Searches