Cybercriminals Clone Antivirus Site to Spread Venom RAT and Steal Crypto Wallets
Briefly

Cybersecurity researchers have revealed a fraudulent campaign deploying a phishing website mimicking Bitdefender to infect victims with the Venom RAT remote access trojan. This campaign aims to compromise personal credentials, including crypto wallets, for financial exploitation. The malicious website links to a ZIP file housing the malware, while the associated Bitbucket account is inactive. Additionally, the tactic involves sophisticated modular malware that enhances the effectiveness of cyberattacks by utilizing open-source tools, emphasizing the need for increased vigilance among users against such deceptive practices.
These tools work in concert: Venom RAT sneaks in, StormKitty grabs your passwords and digital wallet info, and SilentTrinity ensures the attacker can stay hidden and maintain control.
The campaign underscores a constant trend: attackers are using sophisticated, modular malware built from open-source components. This 'build-your-own-malware' approach makes these attacks more efficient.
Read at The Hacker News
[
|
]