LOBSHOT: A Stealthy, Financial Trojan and Info Stealer Delivered … – The Hacker News

In yet another instance of how threat actors are abusing Google Ads to serve malware, a threat actor has been observed leveraging the technique to deliver a new Windows-based financial trojan and information stealer called LOBSHOT.

“LOBSHOT continues to collect victims while staying under the radar,” Elastic Security Labs researcher Daniel Stepanic said in an analysis published last week.

“One of LOBSHOT’s core capabilities is around its hVNC (Hidden Virtual Network Computing) component. These kinds of modules allow for direct and unobserved access to the machine.”

The American-Dutch company attributed the malware strain to a threat actor known as TA505 based on infrastructure historically connected to the group. TA505 is a financially motivated e-crime syndicate that overlaps with activity clusters tracked under the names Evil Corp, FIN11, and Indrik Spider.

The latest development is significant because it’s a sign that TA505, which is associated with the Dridex banking trojan, is…

Read Full Story: https://news.google.com/rss/articles/CBMiTGh0dHBzOi8vdGhlaGFja2VybmV3cy5jb20vMjAyMy8wNS9sb2JzaG90LXN0ZWFsdGh5LWZpbmFuY2lhbC10cm9qYW4tYW5kLmh0bWzSAQA?oc=5

The post LOBSHOT: A Stealthy, Financial Trojan and Info Stealer Delivered … – The Hacker News first appeared on SEO, Marketing and Social News | OneSEOCompany.com.

source: https://news.oneseocompany.com/2023/05/02/lobshot-a-stealthy-financial-trojan-and-info-stealer-delivered-the-hacker-news_2023050244312.html

Your content is great. However, if any of the content contained herein violates any rights of yours, including those of copyright, please contact us immediately by e-mail at media[@]kissrpr.com.