Password-stealing Windows malware is distributed through ads

Windows malware MosaicLoder can be used to steal passwords, install cryptocurrency miners and send Trojans. This newly invented form is provided to victims by ads in search results.

Mosaicloader: A new form of malware

The cybersecurity company Pittefender has been providing details about this malware called MosaicLoder. The latter can be Used to download various threats to compromised machines, Including Gloptepa. It is a type of malware that builds backdoor on infected systems. Malware can then be used Steal important informationSuch as usernames and passwords and bank details.

Unlike many types of malware distributed by phishing attacks or unauthorized software vulnerabilities, Mosaicloader is provided through advertising to victims. Links to malware appear during search results People are looking for corrupted versions of popular software. This means that no one but the attackers knows that the ads are malicious. Didn’t find any automated systems used to buy advertising space.

Sell ​​access to compromised Windows computers

According to Pittefender, Attackers can buy ads through downline ad networks, Small advertising networks that channel advertising traffic to large advertisers. They usually do this on weekends when manual ad verification is assigned to on-call penalties. Cyber ​​Security Company Ultimately, The purpose of this campaign is to sell access to infected computers For other threatening actors.

There may be a new group of cybercriminals behind the mosaicloader, which has nothing to do with what is already known. They are trying Spread the malware as far as possible. But with the current distribution format, Users will be safe as long as they do not attempt to download pirated software. BitDefender advises users to never disable their security solution when preventing the installation of software downloaded from the Internet. In fact, attackers today are able to compile legitimate applications with malware.