New Malware Loader ‘Verblecon’ Infects Hacked PCs with Cryptocurrency Miners

An unidentified threat actor has been noticed using a “elaborate and impressive” malware loader with the ultimate goal of deploying cryptocurrency miners on compromised techniques and potentially facilitating the theft of Discord tokens.

“The proof identified on victim networks appears to point out that the goal of the attacker was to set up cryptocurrency mining software package on victim devices,” researchers from the Symantec Danger Hunter Workforce, element of Broadcom Computer software, reported in a report shared with The Hacker Information.

“This would look to be a reasonably very low-reward intention for the attacker provided the stage of work that would have been needed to establish this subtle malware.”

The sophisticated malware, dubbed Verblecon, is stated to have been very first noticed in January 2021, with the payload incorporating polymorphic characteristics to evade signature-primarily based detections by security computer software.

In addition, the loader carries out further more anti-assessment checks to figure out if it is at this time being debugged or opened in a digital or sandboxed setting, ahead of proceeding to copy alone into the machine and connecting to a remote server to retrieve an encrypted blob that incorporates a URL, which is then utilised to fetch miner payloads.

“The action we have viewed carried out making use of this sophisticated loader indicates that it is being wielded by an individual who could not notice the capabilities of the malware they are making use of,” the scientists pointed out.

“Nevertheless, if it fell into the palms of a more subtle actor the opportunity is there for this loader to be utilized for more really serious attacks, including potentially ransomware and espionage strategies.”

Uncovered this short article exciting? Observe THN on Facebook, Twitter  and LinkedIn to go through more unique information we submit.

Some sections of this write-up are sourced from:
thehackernews.com