THELOGICALINDIAN - Malware articular by Palo Alto Networks targets abstracts captivated on user clipboards from cut archetype and adhesive accomplishments ComboJack is a trojan able to alter biting users wallet abstracts with the wallet abode of an attacker
ComboJack embeds itself on user systems with a accessible antecedent articular by Palo Alto Networks as phishing or malspam email. ComboJack will again frequently analysis the arrangement clipboard for affected cryptocurrency wallet information.
If a 18-carat wallet abode is identified, it is again replaced with a hardcoded wallet abode accepted to accord to the attacker. Users accidentally adhesive the incorrect wallet abode back authoritative a cryptocurrency transaction and accelerate funds to the antagonist instead of their adapted location.
Researchers apparent the malspam targeting Japanese and American users with a attack that could attending article like this:
Opening an absorbed PDF book after-effects in a bulletin apropos to an anchored doc file, which if opened, releases the ComboJack trojan to a user’s system.
The malware has been begin to ambition Bitcoin, Litecoin, Monero and Ethereum cryptocurrency wallet addresses as able-bodied as Yandex and WebMoney in USD and rubles.
The vulnerability exploited by ComboJack has been patched by Microsoft, so as continued as users are active up to date operating systems they should be protected.
Users can additionally add aegis for themselves from ComboJack and agnate malware by not aperture or downloading files with an alien origin, and by ensuring that they are alive active virus aegis software.
Cryptocurrency owners should additionally check back artful and pasting that their entered transaction advice matches the advice they originally affected to ensure they are not afield application an incorrect wallet address.
Checking transaction destination addresses afore finalizing a transaction is a admeasurement that may additionally anticipate adventitious transfers to incorrect wallets.
A quick bifold analysis of abstracts can advice to assure adjoin accident funds to malware like ComboJack and CryptoShuffler, a agnate malware program, and analyze if a abeyant botheration exists on a user’s system.
Have you absent bill in a malware advance or been hit by ComboJack? Let us apperceive in the comments.
Image Courtesy of Shutterstock, Palo Alto Networks
