Shulou(Shulou.com)11/24 Report--

CTOnews.com, April 27 (Xinhua)-- Security company ESET recently released a report that the hacker organization Evasive Panda distributes malware called MsgBot through updates disguised as Tencent's QQ app.

Security researchers at ESET found the trail in January 2022 and reported that malicious activity dates back to 2020 at the earliest.

ESET reports that these malicious MsgBot malware distribute Tencent QQ links to victims through legitimate URL and IP addresses, and the report speculates that it could be a supply chain attack or one of the two ways to launch a man in the middle (AITM) attack.

The main threats to CTOnews.com with MsgBot malware include:

Record the keystroke information of Tencent applications

Steal files from a hard drive or USB drive

Steal text copied to the clipboard

Capture input and output audio streams

Stealing credentials from Outlook and Foxmail email clients

Steal credentials from Chrome, Opera, Firefox, Foxmail, QQBrowser, FileZilla, WinSCP, etc.

Steal the contents of Tencent QQ database that stores user history messages

Steal Tencent Wechat information

Stealing cookie from Firefox, Chrome, and Edge

The full report can be accessed on the ESET website.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.