Fake Movie File Infects PC to Steal Cryptocurrency, Poison Google Results

guest · Jan 12, 2019

Fake Movie File Infects PC to Steal Cryptocurrency, Poison Google Results
January 12, 2019
https://www.bleepingcomputer.com/ne...o-steal-cryptocurrency-poison-google-results/

A malicious Windows shortcut file posing as a movie via The Pirate Bay torrent tracker can trigger a chain of mischievous activities on your computer, like injecting content from the attacker into high-profile web sites such as Wikipedia, Google and Yandex Search or by stealing cryptocurrency.

It started when security researcher 0xffff0800 found a nasty surprise in the files for the movie [...]
Instead of a video file, he found a .LNK shortcut that executed a PowerShell command. The icon of the file attracted his attention, so he ran it through VirusTotal antivirus scanning service.
A bungled command
When executed, the fake movie file will launch PowerShell command that runs a series of other commands that ultimately end by downloading a payload into the %AppData% folder.
Click to expand...

Log in or Sign up

Fake Movie File Infects PC to Steal Cryptocurrency, Poison Google Results

guest Guest

Log in or Sign up

Fake Movie File Infects PC to Steal Cryptocurrency, Poison Google Results

guest Guest

Useful Searches