Shulou(Shulou.com)11/24 Report--

CTOnews.com, June 28 (Xinhua) Security analysis company eSentire has exposed a series of attacks by malicious Trojans DcRAT, in which hackers are suspected of hacking into user terminals by using "adult content" as bait to guide users to click on websites containing Trojans.

It is reported that since January this year, the DcRAT Trojan horse has appeared in OnlyFans and other websites to promote users to actively click on web pages by publishing some content that makes users feel spurred.

Once the user executes the VBScript script embedded on the web page, the hacker will detect the user's operating system through WMI, generate the processing program needed during the attack, then call Windows's API and other DLL files, and finally inject the Trojan program DcRAT to attack the user's computer.

▲ Tuyuan eSentireeSentire said that due to the innate nature of people, the company has received a considerable number of case reports, the most recent of which occurred on June 5. This Trojan is a modified version of AsyncRAT, which not only has the ability to steal users' private information, but also encrypts files on the computer's hard disk through plug-ins.

▲ source eSentireCTOnews.com found from the Trojan disclosure analysis report that the security company also shared several ideas to explain the experience gained when tracking this malicious Trojan.

Open source malware has more users and is relatively more universal, so it is more common and easier to find

The use of bait related to adult content can reduce the victim's vigilance ability.

Users should develop reasonable Internet habits, pay attention to security awareness, and beware of being phished.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.