NJRat making a comeback, researchers observe

March 23, 2015

NJRat – a remote access trojan – is making a comeback, according to researchers with PhishMe.

The malware is being delivered via an email purportedly from eDisk, according to a Thursday post by Ronnie Tokazowski, senior researcher with PhishMe. The message in the email states that a professional gamer has sent a link to a file stored on the online storage service.

Clicking the link brings the user to a page where they can download a file named 'NFSW_Car_Changer.exe,' which is actually the threat, the post indicates.

“The executable is compiled with .NET 4.0,” Tokazowski wrote. “This is worth mentioning because most of the malware today is written in C/C++. The biggest benefit for malware to be written in .NET is that it can be difficult to decode and see what is truly going on.”

Adam Greenberg

Data Security

Crypto stealing malware spread via bogus recruitment messages

SC StaffDecember 31, 2024

Malicious job offers purporting to be from widely known companies have been leveraged by threat actors to facilitate the distribution of cryptocurrency-stealing malware, reports Cybernews.

Ransomware

Novel malware leveraged in Cloud Atlas attacks

SC StaffDecember 30, 2024

Attacks with the new VBCloud malware have been deployed by Russian state-backed threat operation Cloud Atlas, also known as Clean Ursa, Oxygen, Inception, and Red October, to facilitate data theft against dozens of users, most of whom are in Russia, reports The Hacker News.

North Korea hacking concept of a computer keyboard and a key painted with the North Korean flag

Threat Intelligence

Novel OtterCookie malware added to Contagious Interview attack arsenal

SC StaffDecember 27, 2024

BleepingComputer reports that intrusions with the new OtterCookie malware and its updated iteration have been launched by North Korean threat actors against software developers as part of the Contagious Interview campaign, which initially involved the deployment of the BeaverTail and InvisibleFerret payloads.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Related Terms

Adware