Astaroth Malware Uses Legitimate OS and Antivirus Processes to Steal Passwords and Personal Data

Astaroth Malware Uses Legitimate OS and Antivirus Processes to Steal Passwords and Personal Data

Research By: Eli Salem

In 2018, we saw a dramatic increase in cyber crimes in Brazil and, separately, the abuse of legitimate native Windows OS processes for malicious intent. Cyber attackers used living off the land binaries (LOLbins) to hide their malicious activity and operate stealthily in target systems. Using native, legitimate operating system tools, attackers were able to infiltrate and gain remote access to devices without any malware. For organizations with limited visibility into their environment, this type of attack can be fatal.

Article Link: https://www.cybereason.com/blog/information-stealing-malware-targeting-brazil