Fresh Python-Based Trojan Designed as Information Stealer

guest · Dec 15, 2020

Fresh Python-Based Trojan Designed as Information Stealer
Researchers: 'PyMicropsia' Malware Targets Outlook, Web Browsers
December 15, 2020
https://www.databreachtoday.com/fresh-python-based-trojan-designed-as-information-stealer-a-15600

A new Python-based information-stealing Trojan dubbed "PyMicropsia" is linked to a hacking group called AridViper, which is active mainly in the Middle East, according to Palo Alto Networks' Unit 42.

The PyMicropsia malware has the potential to target Microsoft Windows devices and can exfiltrate data and information from the victim's web browser as well as Outlook, the report notes. The malware is also capable of taking screenshots, recording audio and killing running programs, the researchers say
Click to expand...

PyMicropsia is linked to another Windows malware variant called Micropsia, which has been active in the Middle Eastern region since 2016, according to the Unit 42 report. The researchers also note both PyMicropsia and Micropsia are linked to the malware family deployed by the AridViper hacking group - also known as Desert Falcon or APT-C-23 - which has been conducting cyberespionage campaigns in the Middle East since 2015.
Click to expand...

Other Targets
PyMicropsia has been mainly designed to target Windows devices, but the researchers note the malware also contains code that checks if the device is running other operating systems that use POSIX, a standard that allows for interoperability between operating systems, or Darwin, which is a Unix-like OS.

"This is an interesting finding, as we have not witnessed AridViper targeting these operating systems before and this could represent a new area the actor is starting to explore," the Unit 42 report notes.
Click to expand...

Palo Alto Networks - Unit42: PyMICROPSIA: New Information-Stealing Trojan from AridViper

AridViper is an active threat group that continues developing new tools as part of their arsenal. PyMICROPSIA shows multiple overlaps with other existing AridViper tools such as MICROPSIA. Also, based on different aspects of PyMICROPSIA that we analyzed, several sections of the malware are still not used, indicating that it is likely a malware family under active development by this actor.
Click to expand...

Log in or Sign up

Fresh Python-Based Trojan Designed as Information Stealer

guest Guest

Log in or Sign up

Fresh Python-Based Trojan Designed as Information Stealer

guest Guest

Useful Searches