The next version of malware called "infostealer" has arrived. Once installed on the user's computer, it is a type of malware that steals passwords, credit cards, and browsing history. Hackers collect stolen information for their use and resell. Infostealers are not new; security technologies have adopted different techniques to find and block them over the years. One of the techniques is called "sandboxing." A file is executed or opened in a controlled environment - sandbox. If any malicious activities or behaviors are detected, the file is blocked. Sandbox usually runs in a virtual environment without human intervention.
The developer of prominent infostealer LummaC2 developed a new version that evades detection and analysis. LummaC2 can steal information from various sources, such as web browsers, email clients, FTP clients, cryptocurrency wallets, etc. It can also take screenshots of the user's desktop and webcam, record their keystrokes, and download additional malware.
One of the most interesting features of the new variant is its anti-sandbox technique, which prevents the malware from running in a simulated environment (sandbox). LummaC2 monitors the user's mouse movements and waits for a human-like pattern before executing its payload. This way, it can avoid being triggered by automated systems that do not emulate realistic mouse movements.
To protect yourself from malware:
- Use a reputable antivirus software and keep it updated
- Avoid opening suspicious attachments or links from unknown sources
- Use strong and unique passwords for your online accounts and change them regularly
- Enable two-factor authentication whenever possible
- Be careful about what information you share online and who you trust
#ALTACyber
------------------------------
Genady Vishnevetsky
Chief Info Security Officer
Stewart Title Guaranty Company
Houston TX
------------------------------