The cases of thefts of Bitcoin, Litecoin, Monero and Ethereum have become more frequent. The ComboJack virus steals the crypto currency by replacing the destination address of the payment with the address of the criminals' cryptichelper. The target of the fraudster is the users who do not verify the wallet addresses before they are sent.
The virus gets on the user's computer by opening spam emails with attached files. When clicked, the built-in file with the exploit CVE-2017-8759 starts, which signals the criminals to launch the PowerShell command.
It should be noted that the ComboJack virus is intended not only for theft of crypto currency, but also for digital payment systems such as Yandex Money and WebMoney.
Topic: Caution! (Read 132 times)
Jump to: