A malware called,
"Nodersok Malware" which affected by thousands of PC.
"Affected Countries, Sectors and Activity"
How it started?
- This came from clicked ads which forcely installed HTML application.
- Most of the Windows computer are affected and installs a copy of the Node.js (There is a legit and real Node.js) framework to convert infected systems into proxies.
- It will perform click-fraud.
"Attack chain"
To prevent infections, the best advice is that users not run any HTA files they find on their computers, especially if they don't know the files' precise origin. Files downloaded from a web page out of the blue are always a bad sign and shouldn't be trusted, regardless of extension
Reference and for more info. Read some
hereI hope there is no one here who will be a victim of this malware. Good luck and be safe always.
Sharing is caring.@maxreish
