Bitcoin Forum

Other => Beginners & Help => Topic started by: maxreish on September 27, 2019, 03:20:52 AM



Title: [Beware] Nodersok Campaign
Post by: maxreish on September 27, 2019, 03:20:52 AM
A malware called, "Nodersok Malware" which affected by thousands of PC.

               "Affected Countries, Sectors and Activity"


How it started?
  • This came from  clicked ads which forcely installed HTML application.
  • Most of the Windows computer are affected and installs a copy of the Node.js (There is a legit and real Node.js) framework to convert infected systems into proxies.
  • It will perform click-fraud.


                                     "Attack chain"


Quote
To prevent infections, the best advice is that users not run any HTA files they find on their computers, especially if they don't know the files' precise origin. Files downloaded from a web page out of the blue are always a bad sign and shouldn't be trusted, regardless of extension



Reference and for more info. Read some here (https://www-zdnet-com.cdn.ampproject.org/v/s/www.zdnet.com/google-amp/article/microsoft-new-nodersok-malware-has-infected-thousands-of-pcs/?amp_js_v=a2&amp_gsa=1#referrer=https%3A%2F%2Fwww.google.com&amp_tf=From%20%251%24s&ampshare=https%3A%2F%2Fwww.zdnet.com%2Farticle%2Fmicrosoft-new-nodersok-malware-has-infected-thousands-of-pcs%2F)

I hope there is no one here who will be a victim of this malware. Good luck and be safe always.

Sharing is caring.@maxreish