Hello Everyone and welcome to NEW AGE INFORMERS!!!
Today we are going to talk about the malware 'Trojan'. As we know Team Viewer is the most popular tool and widely used in corporate as well. Hackers took advantage of it and put malware in it which steals sensitive information of users computer.
Team viewer is widely used for remote control, desktop sharing, online meetings, web conferencing and file transfer. FewAtoms a security researcher who spotted a malicious URL in the wild. and further analysis of the archive analyzed by the researchers of Trend Micro. A malicious self-extracting archive contains by the URL which is trojan spyware disguised as TeamViewer. which gathers and steals data.
If it is successfully executed on users computer then it will drop additional files to the temp folder. it drops malicious as well as non-malicious files. It creates the folder %User Temp%\PmIgYzA and drops the following files
%User Temp%\PmIgYzA\FZhIG.ico
%User Temp%\PmIgYzA\config.bin
%User Temp%\PmIgYzA\0.0
%User Temp%\PmIgYzA\TV.dll (malicious payload)
%User Startup%\Gateway Layer 1.3957.lnk (shortcut link to dropped TeamViewer.exe)
Non-malicious files
%User Temp%\PmIgYzA\TeamViewer.exe
%User Temp%\PmIgYzA\TeamViewer_Resource_fr.dll
After entering into the victim's computer malware executes the malicious script which is TeamViewer.exe file which loads the malicious DLL (%User Temp%\PmIgYzA\TV.dll.) then it gathers the information of users computer's Operating System, OS Architecture, Computer Name, User Name, RAM size, Presence of AV Products, Administrator Privilege and sends that data to hxxp://intersys32[.]com.
Misusing of popular tools is not new, but recently attackers used TeamViewer to spread powerful malware that gains the victim’s system control remotely and steal money and information from the target's system.
Thank you for your time and stay connected for more updates!!!
Today we are going to talk about the malware 'Trojan'. As we know Team Viewer is the most popular tool and widely used in corporate as well. Hackers took advantage of it and put malware in it which steals sensitive information of users computer.
Team viewer is widely used for remote control, desktop sharing, online meetings, web conferencing and file transfer. FewAtoms a security researcher who spotted a malicious URL in the wild. and further analysis of the archive analyzed by the researchers of Trend Micro. A malicious self-extracting archive contains by the URL which is trojan spyware disguised as TeamViewer. which gathers and steals data.
%User Temp%\PmIgYzA\FZhIG.ico
%User Temp%\PmIgYzA\config.bin
%User Temp%\PmIgYzA\0.0
%User Temp%\PmIgYzA\TV.dll (malicious payload)
%User Startup%\Gateway Layer 1.3957.lnk (shortcut link to dropped TeamViewer.exe)
Non-malicious files
%User Temp%\PmIgYzA\TeamViewer.exe
%User Temp%\PmIgYzA\TeamViewer_Resource_fr.dll
After entering into the victim's computer malware executes the malicious script which is TeamViewer.exe file which loads the malicious DLL (%User Temp%\PmIgYzA\TV.dll.) then it gathers the information of users computer's Operating System, OS Architecture, Computer Name, User Name, RAM size, Presence of AV Products, Administrator Privilege and sends that data to hxxp://intersys32[.]com.
Misusing of popular tools is not new, but recently attackers used TeamViewer to spread powerful malware that gains the victim’s system control remotely and steal money and information from the target's system.
Thank you for your time and stay connected for more updates!!!
Latest Team Viewer Comes With Trojan!!! >>>>> Download Now
ReplyDelete>>>>> Download Full
Latest Team Viewer Comes With Trojan!!! >>>>> Download LINK
>>>>> Download Now
Latest Team Viewer Comes With Trojan!!! >>>>> Download Full
>>>>> Download LINK 8h