MalHide Malware uses the compromised system as an eMail relay

guest · May 28, 2018

MalHide Malware uses the compromised system as an eMail relay
May 28, 2018
https://securityaffairs.co/wordpress/72977/malware/malhide-malware-analysis.html

The cybersecurity experts Marco Ramilli analyzed a new sample of malware dubbed MalHide that implements a quite new attack path to use the compromised system as eMail relay in order to hide the attacker networks.

I believe this is a quite interesting Malware because it firstly implements several obfuscation stages by using different obfuscation techniques and secondly it implements a quite new attack path (not new per-se but new on opportunistic malware families) where the attacker doesn’t want to steal information and/or compromise a system for possession and/or destruction but the attacker uses the compromised system as eMail relay in order to hide the attacker networks.

For example, having a successful privilege access on the victim machine, the attacker might decide to perform several malicious actions, but among all the choices, he decides to spawn an SMTP relay to send anonymously fraud emails. Based on my past experience this is quite wired, isn’t it ?!
Click to expand...

Log in or Sign up

MalHide Malware uses the compromised system as an eMail relay

guest Guest

Log in or Sign up

MalHide Malware uses the compromised system as an eMail relay

guest Guest

Useful Searches