This Evil Dropper Infects You With A Dozen Malware Strains On The Identical Time

Cybercriminals have been noticed utilizing search engine optimisation poisoning to distribute a brand new malware loader which tries to contaminate the goal endpoint with a dozen malware households.

Researchers from Kaspersky found that for many individuals, typing the key phrase “software program crack” into Google brings up a number of websites distributing this new malware loader, a few of which have even made it to the famed first web page of the search outcomes. The loader in query is known as “NullMixer”, and is designed for the Home windows working system apparently, it installs every kind of password stealers, viruses, backdoors, banking trojans, crypto miners, you identify it. The one factor seemingly lacking is ransomware.

Among the many malware households put in this fashion are Redline Stealer, Danabot, Raccoon Stealer, Vidar Stealer, SmokeLoader, PrivateLoader, ColdStealer, Fabookie, PseudoManuscrypt, and others.

Baiting with cracks

The attackers selected “software program crack” as their primary key phrase, researchers imagine, attributable to the truth that individuals searching for cracks will often ignore warnings coming from their antivirus packages and set up the executable information anyway.

Based on Kaspersky, NullMixer has to this point tried to contaminate greater than 47,000 endpoints protected by its safety options. The victims have been positioned all around the world, together with the U.S., Germany, France, Italy, India, Russia, Brazil, Turkey, and Egypt.

The researchers have been additionally baffled by the variety of malware households being put in by way of NullMixer. It’s not precisely refined. Units that fall sufferer of this assault will develop considerably slower, have home windows popping up for no cause, and can showcase quite a few different signs of an infection. Kaspersky suspects that NullMixer might truly be an illustration, exhibiting different malware operators what it’s able to do, till one decides to make use of it for their very own distribution efforts.

As issues stand now, the easiest way to eradicate NullMixer from a compromised system is by way of Home windows reinstall.

Through: BleepingComputer