Subpoena Phishing Emails Serve Nasty Predator Thief Infection

guest · Nov 6, 2019

Subpoena Phishing Emails Serve Nasty Predator Thief Infection
November 6, 2019
https://www.bleepingcomputer.com/ne...-emails-serve-nasty-predator-thief-infection/

Phishers have been spotted delivering subpoena-themed emails spoofed to look like they're coming from the UK Ministry of Justice and attempting to infect their targets with Predator the Thief information stealer malware payloads.

This malspam campaign mainly targeted retail and insurance companies, with the attackers trying to trick their potential victims into opening an embedded link pointing to redirection chain leading to a Word document with malicious macros Cofense researchers who discovered the campaign found.

"You have 14 days to provide notice. If you do not so prepare yourself, the court will take place without you," the phishing email says.
This campaign's operators also ask their potential victims to "prepare all necessary documents that are listed in the attached file" to maximize the user's incentive to click the malicious link.
Click to expand...

"The macro, upon execution, downloads the malware via PowerShell, which is a sample of the Predator the Thief information stealer," the researchers also discovered.
Predator the Thief is a publicly sold data stealer malware sold as a package containing a builder and a C2 panel. Its creators also provide customer support services via Telegram channels.

All the data is then consolidated, packed, and sent to the malware's command-and-control (C2) server via HTTP POST requests, together with fingerprint data and network configurations.
Click to expand...

Cofense: You’ve Been Served: UK Scammers Deliver ‘Predator the Thief’ Malware Via Subpoena

Log in or Sign up

Subpoena Phishing Emails Serve Nasty Predator Thief Infection

guest Guest

Log in or Sign up

Subpoena Phishing Emails Serve Nasty Predator Thief Infection

guest Guest

Useful Searches