article thumbnail

Hackers hijacked the eScan Antivirus update mechanism in malware campaign

Security Affairs

Puppeteer orchestrates the core functionality of the malware, including the cryptocurrency mining as well as the backdoor deployment. This loader is a simple PE that decompresses another shellcode using Gzip and executes it in a separate thread that kiads the Stage 3 malware Puppeteer.

Cleanup 97
article thumbnail

Researchers uncovered a new Malware Builder dubbed APOMacroSploit

Security Affairs

Researchers from security firm Check Point uncovered a new Office malware builder called APOMacroSploit, which was employed in attacks that targeted more than 80 customers worldwide. BitRAT implements multiple features, including mining cryptocurrencies and RAT features. Pierluigi Paganini. SecurityAffairs – hacking, apomacrosploit).

Cleanup 109