Antivirus solution developer 'Doctor Web' about the discovery of a dangerous backdoor being distributed by cybercriminals masquerading as an update for the popular Google Chrome browser. It is reported that more than 2,000 people have already fallen victim to these cybercriminals, and the number continues to grow.
According to the virus laboratory 'Doctor Web', to maximize audience coverage, the attackers utilized resources based on CMS WordPress — from news blogs to corporate portals, which the hackers managed to gain administrative access to. A JavaScript script has been embedded in the code of the compromised sites that redirects users to a phishing site disguised as the official resource of the Google company (see the screenshot above).
With the help of the backdoor, cybercriminals can deliver 'useful' payloads in the form of malicious applications to infected devices. Among them are: the X-Key Keylogger, the Predator The Thief stealer, and a trojan for remote management via RDP protocol.
To avoid unpleasant incidents, the specialists of 'Doctor Web' recommend being extremely careful when surfing the Internet and advise not to ignore the phishing filter available in many modern browsers.
Mənbə: 3dnews.ru
