Nigelthorn Malware Infects Over 100,000 Systems

itman · May 12, 2018

A newly discovered malware family capable of credential theft, cryptomining, click fraud, and other nefarious actions has already infected over 100,000 computers, Radware reveals.

Dubbed Nigelthorn because it abuses a Google Chrome extension called Nigelify, the malware is propagating via socially-engineered links on Facebook. The group behind the campaign has been active since at least March 2018 and has already managed to infect users in 100 countries.

Victims are redirected to a fake YouTube page that asks them to install a Chrome extension to play the video. Once they accept the installation, the malicious extension is added to their browser, and the machine is enrolled in the botnet.

Impacting both Windows and Linux machines, the malware depends on Chrome, which suggests that those who do not use this browser are not at risk, the security researchers point out.
Click to expand...

https://www.securityweek.com/nigelthorn-malware-infects-over-100000-systems

stapp · May 13, 2018

Already posted here..

https://www.wilderssecurity.com/thr...riggers-credential-theft-cryptomining.403615/

Log in or Sign up

Nigelthorn Malware Infects Over 100,000 Systems

itman Registered Member

stapp Global Moderator

Log in or Sign up

Nigelthorn Malware Infects Over 100,000 Systems

itman Registered Member

stapp Global Moderator

Useful Searches