Sicherheit
Fake updates: How attackers trick users into installing malware
· Alexander Dolle-Koch
Microsoft reports that the attackers redirect their victims to websites they run themselves. There, malware is offered as an update for the browser or the operating system.
Microsoft reports that the attackers redirect their victims to websites they run themselves. There, malware is offered as an update for the browser or the operating system. Other sites claim that a technical check has failed or that an error needs to be rectified.
Users are then prompted to download and run programmes. In some cases, they are even instructed to enter specific commands themselves on their device. Microsoft refers to this scam as ClickFix.
The malware targeting Windows is particularly dangerous: it monitors files and keystrokes and steals login credentials. It can also tap into the microphone and camera, granting the attackers remote access to the device. During the latest wave of attacks, Microsoft encountered a new variant of CornFlake, a programme designed to steal data.
It is possible that the attackers are also targeting Android devices. In any case, some of the websites prompted visitors to download and install an Android installation file.
Source: Tageskarte.io ↗