USB worm unleashed by Russian state hackers spreads worldwide
USB worm unleashed by Russian state hackers spreads worldwide
arstechnica.com
USB worm unleashed by Russian state hackers spreads worldwide
20 comments
-
-
if you're cold, they're cold
put them in the computer at your work
-
Oh noes, my Macintosh is safe again!
-
You're on lemmy but not using Linux?!?!!??! Wtf are you?! /s
-
Technically, I’ve got dozens of Linux servers. 😇
-
-
-
This is the best summary I could come up with:
A group of Russian-state hackers known for almost exclusively targeting Ukranian entities has branched out in recent months either accidentally or purposely by allowing USB-based espionage malware to infect a variety of organizations in other countries.
“Gamaredon continues to focus on [a] wide variety [of] Ukrainian targets, but due to the nature of the USB worm, we see indications of possible infection in various countries like USA, Vietnam, Chile, Poland and Germany,” Check Point researchers reported recently.
The image above, tracking submissions of LitterDrifter to the Alphabet-owned VirusTotal service, indicates that the Gamaredon malware may be infecting targets well outside the borders of Ukraine.
The data suggests that the number of infections in the US, Vietnam, Chile, Poland, and Germany combined may be roughly half of those hitting organizations inside Ukraine.
The core essence of the Spreader module lies in recursively accessing subfolders in each drive and creating LNK decoy shortcuts, alongside a hidden copy of the “trash.dll” file.
“Comprised of two primary components—-a spreading module and a C2 module—it’s clear that LitterDrifter was designed to support a large-scale collection operation,” Check Point researchers wrote.
The original article contains 744 words, the summary contains 185 words. Saved 75%. I'm a bot and I'm open source!
20 comments
"the malware is written in the Visual Basic Scripting language." is where I stopped 😹 lol at least we know the Russians are suffering.
This is like when I assumed my high school IT department was so good that I'd never be able to get past their content restrictions, but then renaming Halo CE to "explorer.exe" let me play all the games I wanted.
I had FF3 broken up into a few files and renamed and disbursed through the school network so I’d just pull them all into a local file at the computer I was working at in the lab and play during class. I thought I was the shit.
norton family:
Renaming it to "winword.exe" was my go-to.
To be fair, it’s pretty smart to exploit the flaws in VB to make malware.
Are they? Because if the worm is successfully spreading... 🤷
It's funny, though..
They're Russians. There's no situation where they aren't suffering.
I’m not following. VBScript seems like the right tool. Why would they use something else? They’re generally light years beyond US defense capabilities so there’s a real dearth of suffering on their side.
Now if the joke is that they’re suffering because they have to use VBScript, I can get behind that
WScript.Echo "Just saying if I was invited onto a team intent on wreaking havoc upon our enemies, I would probably quit after 100 lines of calling windows apis in VBScript" & vbNewLine
As a non programmer, isn't visual basic for Excell scripts?
No you can run any .vbs script standalone