MassLogger: An Emerging Spyware and Infostealer

guest · Aug 22, 2020

MassLogger InfoStealer Malspam Campaign
August 19, 2020
https://blogs.infoblox.com/cyber-threat-intelligence/masslogger-infostealer-malspam-campaign/

On 11 August, we observed a malicious spam (malspam) email campaign distributing MassLogger malware. MassLogger is a relatively new information stealer (infostealer) that was reportedly first observed in April 2020.1 It is written using .NET, a programming framework developed by Microsoft.

MassLogger has the ability to log keystrokes and clipboard data, take screenshots, as well as steal credentials from Chrome, Firefox, Outlook, Thunderbird, Discord, NordVPN, FileZilla, Telegram, and more.
MassLogger can also be spread over USB by injecting copies of its code into files on connected USB devices. When a user opens one of these infected files, the malicious code runs and can infect a new computer.
Click to expand...

VMRay Labs: Malware Analysis Spotlight: MassLogger’s Noisy Stealing Attempts

In this Malware Analysis Spotlight, the VMRay Labs Team will examine MassLogger, a Spyware/Stealer that was first publicly observed in-the-wild at the end of April. During our analysis, we monitored a significant amount of behavioral matches for techniques that MassLogger uses to discover the host machine and to steal sensitive data.

MassLogger is delivered by opening a malicious Word Document (Figure 1) that exploits the vulnerability in the equation editor (CVE-2017-11882/CVE-2018-0802), which allows for the takeover of the control flow. [...]
Click to expand...

Log in or Sign up

MassLogger: An Emerging Spyware and Infostealer

guest Guest

Log in or Sign up

MassLogger: An Emerging Spyware and Infostealer

guest Guest

Useful Searches