Cryptocurrency-stealing virus detected in KMSpico activator for pirated Windows
The cybersecurity company Red Canary has provided guidance on identifying Cryptbot
10.12.2021 - 12:10
684
1 min
0
What’s new? A virus has been detected in KMSPico's Microsoft Windows and Office activation software, which collects the users' personal data. The attackers use the Cryptbot virus to steal cryptocurrency among other things, according to the cybersecurity company Red Canary.
How does the virus work? Cryptbot has been around for a long time, now the hackers have begun disguising it as the KMSPico activator installer. By clicking on the download link, the user downloads the virus and at the same time, the program installs the activator itself. The attackers disguise Cryptbot with the CypherIT AutoIT encryption software. The virus steals the personal data from the users' web browsers, antivirus software, and crypto wallets.
How to detect the malware? Red Canary recommends searching for binaries containing AutoIT metadata but without AutoIT in the file names, namely, findstr commands similar to “findstr /V /R "^ ... $.”
PowerShell or cmd.exe commands containing “rd /s /q, timeout, and del /f /q together” are used to find Cryptbot.
Useful material?
Telegram 
Twitter Market
According to the politician, this will combat widespread corruption by ensuring transparency and accountability of budgetary funds
Nov 26, 2024
Market
Justin Sun invested $30 million in the project
Nov 26, 2024
Technologies
Network fees will be integrated into the cost of swaps
Nov 22, 2024
Market
The company’s unrealized profits from investing in its first cryptocurrency approached $14 billion
Nov 19, 2024
Incidents
The search, the reason for which was not announced, took place a week after the election, the results of which Polymarket users predicted quite accurately
Nov 14, 2024
Market
Analysts point to the growing popularity of the first cryptocurrency as a safe haven asset
Nov 13, 2024
Cryptocurrency rates
-
Bitcoin
$92 460
BTC
-2.32%
-
Ethereum
$3 327.18
ETH
-3.49%
-
BNB Smart Chain
$579.4
BSC
+1.23%
-
Ripple
$1.38
XRP
-4.77%
-
Dogecoin
$0.387578
DOGE
-4.59%
-
Cardano
$0.941924
ADA
-3.48%
-
Stellar XLM
$0.430969
XLM
-14.69%
-
Polkadot
$8.03
DOT
-4.54%
-
Bitcoin Cash
$490.65
BCH
-2.28%
-
Litecoin
$92.72
LTC
-2.09%