Hey guys how is everyone doing?,

Coming here to share a couple cool articles about a new type of malware that was getting intructions from Memes on Twitter, yes you read it right Memes.

Here is a little summary of the findings.

The malware itself is relatively underwhelming: like most primitive remote access trojans (RATs), the malware quietly infects a vulnerable computer, takes screenshots and pulls other data from the affected system and sends it back to the malware’s command and control server.

What’s interesting is how the malware uses Twitter as an unwilling conduit in communicating with its malicious mothership.

Trend Micro said in a blog post that the malware listens for commands from a Twitter account run by the malware operator. The researchers found two tweets that used steganography to hide “/print” commands in the meme images, which told the malware to take a screenshot of an infected computer. The malware then separately obtains the address where its command and control server is located from a Pastebin post, which directs the malware where to send the screenshots

The malware appears to have first appeared in mid-October, according to a hash analysis by VirusTotal, around the time that the Pastebin post was first created.

But the researchers admit they don’t have all the answers, and more work needs to be done to fully understand the malware. It’s not clear where the malware came from, how it infects its victims or who’s behind it. It’s also not clear exactly what the malware is for — or its intended use in the future. The researchers also don’t know why the Pastebin post points to a local, non-internet address, suggesting it may be a proof-of-concept for future attacks.

Although Twitter didn’t host any malicious content, nor could the tweets result in a malware infection, it’s an interesting (although not unique) way of using the social media site as a clever way of communicating with malware.

The logic goes that in using Twitter, the malware would connect to “twitter.com,” which is far less likely to be flagged or blocked by anti-malware software than a dodgy-looking server.

For more information you can read articles on the links below:

https://blog.trendmicro.com/trendlabs-security-intelligence/cybercriminals-use-malicious-memes-that-communicate-with-malware/

https://techcrunch.com/2018/12/17/malware-commands-code-twitter-hidden-memes/

Have a great week.

Cheers

Oi pessoal como vai vocês?.


Estoy viniendo aquí para compartir un nuevo vídeo legal de Silvana Lima del equipo de Surf Kore.



Link: https://www.instagram.com/p/BrOZU0Gn8-W/

También me gustaría aprovechar la oportunidad de compartir con la comunidad las direcciones Kore para las donaciones:

Aquí está la dirección Kore de Karol Ribeiro: KVjEMTLMFsQ6822EktXdyPp2WVKJM7ihCY

Aquí esta la dirección Kore de la Escuela de Silvana Lima:  K8iDByF6VtbavgWxsotqtWhE71JJ5a13P8

Todas las donaciones van directamente a ellos.

Gracias y tienen una gran semana.

Va Kore, Va BTC.

Oi pessoal como vai vocês?.


Estou vindo aqui para compartilhar um novo vídeo legal da Silvana Lima da equipe de Surf Kore.



Link: https://www.instagram.com/p/BrOZU0Gn8-W/

Eu também gostaria de aproveitar a oportunidade para compartilhar com a comunidade os endereços Kore para doações:

Aqui esta o endereço Kore da Karol Ribeiro: KVjEMTLMFsQ6822EktXdyPp2WVKJM7ihCY

Aqui esta o endereço Kore da Escolinha da Silvana Lima:  K8iDByF6VtbavgWxsotqtWhE71JJ5a13P8

Todas doações vão diretamente a eles.

Obrigado e tenham uma ótima semana.

Vai Kore, Vai BTC.