Topic: Please be careful when you download anti-virus (Read 299 times)
Although I didn't download anti-virus on my computer. A day when I was running a browser, anti-virus was downloaded and I accidentally added the software to my computer. When I did this I participated in this forum's bitcoin core challenge and then I ran into a problem when I saw that my computer became very slow, I was able to do 50% more work in bitcoin core challenge in 7 days. but later due to the antivirus software downloaded on the computer It took me another 25-26 days longer to do the next 50%, though I was catching up much later. Later I reset my computer and now it is working very well, however we have to be careful about these things.
and therefore always make sure that the url you visit is correct and does not indicate anything suspicious, because nowadays many users are too careless to check whether the url they visit is correct or not. >edit<
One thing I do consider is remark before downloading an AV, because you will see from what people think or feel about an app from their remarks. it's a good area to look at when downloading AV, then we you see too much red flags or complains about an app then you should know it has a problem somewhere. Most of this antivirus are good but sometimes I feel like this ame people who create this antivirus are also the same people who program the virus or bugs that spies on users, just using the antivirus as an opportunity to enter the space. this days no where is safe so whatever we do let's just do it with care.
Do people still use antivirus?
Why do you think people stop using it?Quote
This is new to me because I have noticed that people do not care a out antivirus again since antivirus am easily because a virus.
Can you back this up with a good explanation based on facts.Quote
I take my privacy very serious and that is one of the reasons why I have decided to stay away from using antivirus because they are majorly the problem most of us might be facing when using different gadgets.
We can always stay without using an antivirus if we can maintain our privacy.
So if you're using an anti-virus you are compromising your privacy sounds new to me please head to any reputable anti-virus site to get all the facts about anti-virus. We can always stay without using an antivirus if we can maintain our privacy.
and therefore always make sure that the url you visit is correct and does not indicate anything suspicious, because nowadays many users are too careless to check whether the url they visit is correct or not. because i've been using antivirus since i first got to know computers, and so far it hasn't caused me any harm, in fact the antivirus helps me to filter sites that are indicated as scammers or contain malware. so users need to pay attention to the applications they download and install on their devices and ensure that the applications are not malware.
Do people still use antivirus? This is new to me because I have noticed that people do not care a out antivirus again since antivirus am easily because a virus. I take my privacy very serious and that is one of the reasons why I have decided to stay away from using antivirus because they are majorly the problem most of us might be facing when using different gadgets.
We can always stay without using an antivirus if we can maintain our privacy.
We can always stay without using an antivirus if we can maintain our privacy.
Of course afterall there are some people out there who are not making use of anti virus but yet they're still maintaining their privacy, sometimes the reason why people get scammed is due to downloading different types of applications in their phone. I can't even remember when last I make use of this anti virus in my phone but yet all my documents both my assets are intact, for me this anti virus is of no help to me but I don't know about those people who are making use of laptop.
It couldn't been said anything better, thanks to OP. In the pursuit to get cracked softwares or pro softwares for free, people often install malwares into their computers without even knowing. It's not just antivirus softwares but all other softwares that don't come free and cheap so people often look for alternatives in pirated software. In the coming days, I'll have a thread go out on Google Chrome extensions being another attack vector that is seemingly missed by a lot of people. Security needs to be at best level if we want to secure assets we currently have in pursuits for more.
This is most common among underdeveloped countries especially in Africa where computer users think that cheap pirated software does the same function as the genuine ones. That is a big lie. Software engineers know how to scam people by making low quality products or malware infested ones. I do not use anti virus because I do not trust using them and am very careful of sites I visit. Most people who worry about malware are those who visit "dirty" sites like porn sites and dating sites.
Do people still use antivirus? This is new to me because I have noticed that people do not care a out antivirus again since antivirus am easily because a virus
Yes, people still use them. Individuals or corporations, they are using it. Windows has its own integrated antivirus and it's called Microsoft Defender but even with that, many don't like it and still purchase antiviruses that appears on their feed and ads.I take my privacy very serious and that is one of the reasons why I have decided to stay away from using antivirus because they are majorly the problem most of us might be facing when using different gadgets.
We can always stay without using an antivirus if we can maintain our privacy.
Honestly, those that don't use antivirus doesn't have to use it because your computer probably is a Windows operating system and it has one on it already. But, the antivirus as they say is always yourself. You are not going to download anything odd and won't launch it on your computer and with your browsing activity, you're very careful so that you won't contain these spywares, malwares and other types of it and viruses. We can always stay without using an antivirus if we can maintain our privacy.
Oh my god. Why didn't I see this post earlier? I have Avast anti-virus already installed on my PC. As soon as I read the post I uninstalled it. What should I do now? Format everything and install the operating system again. Is there any way to get rid of them? Should I rely on any antivirus? I plan to use Kaspersky Anti-Virus. Can you tell me how it is? I saw many people using it. So I also want to use it or is there any other way to stay safe apart from using anti-virus?
~snip~
You are making a connection between your online privacy and the use of AV, which has absolutely nothing to do with each other - because AV should protect you from viruses/malware/spyware and not protect your privacy. If you want to somewhat protect your privacy online, then use a VPN or even better Tor, and don't reveal your personal information unnecessarily.
I believe they become related when the downloaded infected AV starts digging for the important files on the infected computer. I agree that AV should protect our unit from viruses or any unwanted files but if it comes from the unofficial sites then the worst thing can happen.
I don't know what to say about your claim that AV can easily become a virus, but I guess you have your reasons for thinking so...
AV can be easily an hacker application if they are downloaded from unofficial sites. As far as I know, @OP give links of those AV injected by malware comes from the unofficial one tricking naive people who wanted free Antivirus. So people must learn to verify whether an application comes from the official sites since any hacker can just modify any AV and upload it elsewhere.
Do people still use antivirus? This is new to me because I have noticed that people do not care a out antivirus again since antivirus am easily because a virus. I take my privacy very serious and that is one of the reasons why I have decided to stay away from using antivirus because they are majorly the problem most of us might be facing when using different gadgets.
We can always stay without using an antivirus if we can maintain our privacy.
We can always stay without using an antivirus if we can maintain our privacy.
Many people still use antivirus and internet security especially when there is a huge risk when browsing the internet. Internet security can halt the access to a suspicious site when an AV can block the download or installation of any file that is infected by malware. It serves as extra layer of security and it does not hurt if we deployed one.
So now it begs the question that if we are in crypto space, we should really be alert on everything we click and downloaded, even anti-virus software because we could be trick by going into this kind of websites and we thought that we are safe.
Sometimes, when you browse blogs and websites, you may be directly redirected to phishing sites that appear as pop-ups in advertisements. You might also find that fake antivirus programs, Cleaner software, or programs containing Trojans have been automatically downloaded. Indeed, people can make a significant mistake by opening and installing these malicious programs on their main computer used for cryptocurrency investments after feeling reassured by reading that the downloaded program is legitimate software from companies like Avast or Bitdefender, etc. It is worth noting that scammers pour poison into honey. They create their malicious programs to impersonate the names of protection/security and maintenance programs and the like so as not to raise any suspicion in the minds of their victims and then easily steal their computers. Anyone must add browser extensions to detect phishing sites and block advertisements, avoid using their main computer online, and purchase dedicated hardware for their long-term investments.
Yes. Phishing scams are scary, especially when they masquerade as something you trust. I remember a time I almost clicked on a pop-up that looked exactly like my antivirus software update notification. Luckily, something felt off, and I double-checked directly on the antivirus company's website.
Since then, Ive gotten super cautious about anything I download, especially when browsing crypto-related content. Maybe its a bit paranoid, but I wouldd rather be safe than sorry. Definitely considering a dedicated hardware for all my crypto-related stuff too. Security is no joke in this crypto world!
~snip~
You are making a connection between your online privacy and the use of AV, which has absolutely nothing to do with each other - because AV should protect you from viruses/malware/spyware and not protect your privacy. If you want to somewhat protect your privacy online, then use a VPN or even better Tor, and don't reveal your personal information unnecessarily.
I don't know what to say about your claim that AV can easily become a virus, but I guess you have your reasons for thinking so...
Do people still use antivirus? This is new to me because I have noticed that people do not care a out antivirus again since antivirus am easily because a virus. I take my privacy very serious and that is one of the reasons why I have decided to stay away from using antivirus because they are majorly the problem most of us might be facing when using different gadgets.
We can always stay without using an antivirus if we can maintain our privacy.
We can always stay without using an antivirus if we can maintain our privacy.
I had experienced this before when I was still naive, I was able to download a free antivirus, and that was like Avast, IIRC.
And then, all of a sudden, the computer became slower, and then a lot of pop-up ads came already. I think that I have downloaded a fake version.
If there are folks that are still using outdated windows operating system, they're more prone to these fake anti-virus which might contain malware.
And then, all of a sudden, the computer became slower, and then a lot of pop-up ads came already. I think that I have downloaded a fake version.
If there are folks that are still using outdated windows operating system, they're more prone to these fake anti-virus which might contain malware.
The problem will always be the person sitting in front of the monitor. A careful and security-savvy person will be able to surf the Internet without any antivirus at all. But those moments when people use unlicensed Windows, which is not updated and already has several viruses in its image, or do not buy licensed antivirus but try to save money and use cracks, are only a self-soothing pill and a temporary one. Therefore, of course, those people who are concerned about their financial information will study and use Linux, and, despite this, in parallel, always monitor everyone for security-related news.
Thanks for the heads up, and besides these tactics of phishing ...I think we also need to blame ourselves for not paying for these legitimate softwares to support the developers, but choose to go for cracked ones which takes us one step closer to being hacked!!
Sometimes d let's be aware that not everything is free, as one way or another we shall be paying for it...
But like you said,as crypto users we give ourselves a heads up and I expect us to be a step ahead to avoid being phished this way
Sometimes d let's be aware that not everything is free, as one way or another we shall be paying for it...
And how do this anti virus though make people download it? Do they search using Google which for us crypto enthusiast is a no no. Or do they received it thru their email and then just click on the links?
Most likely crypto users are targeted have data mining happens, then hackers try their luck with all kinds of tricks ranging from airdrops, jackpots, unclaimed crypto prize and list goes on...But like you said,as crypto users we give ourselves a heads up and I expect us to be a step ahead to avoid being phished this way
And how do this anti virus though make people download it? Do they search using Google which for us crypto enthusiast is a no no. Or do they received it thru their email and then just click on the links?
No one is really safe, even if we are not a crypto investors, there could be sensitive info that we keep on our machine and so it's very important to practice safety and not to download or used crack softwares.
No one is really safe, even if we are not a crypto investors, there could be sensitive info that we keep on our machine and so it's very important to practice safety and not to download or used crack softwares.
People who do not understand that every software should be downloaded only from the official website and if possible verified before installation are really in big trouble. We cannot just go to the search engine and type in "free antivirus" and click on the link that appears in the search results without checking whether it is a legitimate website.
In addition, forget about free AVs, if you already want to use them, then choose the paid versions - and before you decide to pay, most AVs give a trial period so you can experience how they work. Some complain that such programs slow down their computer, but if you want to work comfortably on your computer today, then don't even think about such a thing without at least 8 GB of working memory.
In addition, forget about free AVs, if you already want to use them, then choose the paid versions - and before you decide to pay, most AVs give a trial period so you can experience how they work. Some complain that such programs slow down their computer, but if you want to work comfortably on your computer today, then don't even think about such a thing without at least 8 GB of working memory.
Hackers took control of my laptop once I downloaded Anti-virus. at that time only automatic browser was opening on my laptop and automatically started browsing various websites. At that time my 56 ETH in Metamask got hacked. Which was the first incident of 2019. Since then I don't use any cracked software and I don't use Anti virus either. I am getting enough security through Windows defender. It does not allow any crack software to be installed. Due to which no malware software is installed. I haven't been hacked since that incident
The hackers are using the preventive measure as a means to attack now in this era. OP is right we should be careful if not we would surely fall for them. One thing i don't like doing is to download free software on my laptop. Free software are most times fake and if they are legit, they end up having less security because they removed such securities to limit subscription cost, API cost to mention a few.I think the prevention measures you too are great. We are meant to prevent it so we should stop using free software anymore. It is a new means to hack into our system.
Warez, crack softwares and others are really dangerous to crypto investors, specially if we have big amounts in our wallet and we uses our laptop that have our crypto for every day use. Before I used to download a lot from this crack sites, but that is before my crypto journey and it really mess up my laptop and I have to re-format it several times.
Cracked softwares are risky and we without technical skills, can not know what the sellers do with their crack tools. We install the software, their crack tools on our computers and what the hell will happen next. We only know when it happens but at that time, our money was stolen already and it's too late to know the risk. Money gone first, know risk later, it is not helpful at all.I use Windows. I had no problems while using it. But I have been suffering from a problem for the last two months. When I downloaded anti-virus, it downloaded a virus, which gave me a lot of trouble when browsing the internet.
Windows is a most commonly used OS and it is a most favorite targets of hackers.If you can use Linux, it's good because you will have more threats on Linux OS, as said hackers will build their malicious packagers to aim at OS with biggest user base.
Links shared in OP make me feel that these websites are not from official ones of these companies but from community sites, where they share cracked softwares.
Downloading anything, any file from strange websites is high risky practice and I will avoid it with all cost. I am more aware of potential threats if that practice is to download softwares.
10 ways to avoid phishing scams
Code:
avast-securedownload.com (Avast.apk)
bitdefender-app.com (setup-win-x86-x64.exe.zip)
malwarebytes.pro (MBSetup.rar)
First two links are red flags clearly with -securedownload and -app as part of their domains.bitdefender-app.com (setup-win-x86-x64.exe.zip)
malwarebytes.pro (MBSetup.rar)
The last link is not obvious red flag but it's not popular to see website with .pro in their domain name so I will be careful with it.
I'm always watching my back because crypto is not newbies but for professionals because in tight corner, they understand themselves and doing the ultimate targets to accomplish. One thing we should do, be careful when it involves online, we know how these files and data works, don't underestimate any chances but built up to the expected standards. Anti-virus will do the accountable task for the reason it was downloaded, although not all of them looks possibly.
It couldn't been said anything better, thanks to OP. In the pursuit to get cracked softwares or pro softwares for free, people often install malwares into their computers without even knowing. It's not just antivirus softwares but all other softwares that don't come free and cheap so people often look for alternatives in pirated software. In the coming days, I'll have a thread go out on Google Chrome extensions being another attack vector that is seemingly missed by a lot of people. Security needs to be at best level if we want to secure assets we currently have in pursuits for more.
Was just browsing when I saw this news, regarding malicious and fake anti-virus sites. Of course, you will question, why it is related to crypto?, the answer is that because one of the tenant for being a crypto enthusiast so that we will not get phished by malwares that can still our crypto assets is to make sure that our anti-virus is updated.
But what if the attack is on the anti-virus itself like the following?
And as you can see in the images, it's hard to see that this is a malicious sites and not the real one.
1. The site hosting "avast-securedownload . com" is a spyware and a stealer,
2. While the "bitdefender-app. com" has been injected with Lumma.
3. While "malwarebytes. pro" has a payload of StealC.
https://www.trellix.com/blogs/research/a-catalog-of-hazardous-av-sites-a-tale-of-malware-hosting/
So now it begs the question that if we are in crypto space, we should really be alert on everything we click and downloaded, even anti-virus software because we could be trick by going into this kind of websites and we thought that we are safe.
And also that we are about to hit the bull run, the cyber criminals activity are ramping up their activity against us. So be very very careful everyone.
But what if the attack is on the anti-virus itself like the following?
Code:
avast-securedownload.com (Avast.apk)
bitdefender-app.com (setup-win-x86-x64.exe.zip)
malwarebytes.pro (MBSetup.rar)
bitdefender-app.com (setup-win-x86-x64.exe.zip)
malwarebytes.pro (MBSetup.rar)
And as you can see in the images, it's hard to see that this is a malicious sites and not the real one.
1. The site hosting "avast-securedownload . com" is a spyware and a stealer,
2. While the "bitdefender-app. com" has been injected with Lumma.
Quote
Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.
3. While "malwarebytes. pro" has a payload of StealC.
Quote
Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.
https://www.trellix.com/blogs/research/a-catalog-of-hazardous-av-sites-a-tale-of-malware-hosting/
So now it begs the question that if we are in crypto space, we should really be alert on everything we click and downloaded, even anti-virus software because we could be trick by going into this kind of websites and we thought that we are safe.
And also that we are about to hit the bull run, the cyber criminals activity are ramping up their activity against us. So be very very careful everyone.
Well thanks for your information, actually this information can be very common to the view of most people, maybe they might be having this feeling that what has anti virus gat to do with cryptocurrency, we should always have this at the back of our mind that whatever thing that is been created by scammers is for a reason, there's always a reason behind those things that is been created by them. that is why we need to be extremely careful, any information that comes from this platform need to be take very serous we don't have to joke over it because is for our own safety.
Firstly, anti-virus is not a foolproof security measure when it comes to saving us from malicious attacks on our crypto holdings. Still, it gives extra protection at least for the known malicious attacks.
We will end up in this kind of website when we try to download the software for completely free and that's the mother of all evil when it comes to the Windows platform, it's just better to go without any anti-virus after all instead of downloading a cracked version which does exact opposite of what it is supposed to do.
Its been a while I even heard of the use of antivirus because these days every operating system, be it a phone or laptop serves ones privacy needs so much so that even malicious bugs and malwares along with phishing ads could be easily detected based on settings and even the OS, of which I am making reference to.We will end up in this kind of website when we try to download the software for completely free and that's the mother of all evil when it comes to the Windows platform, it's just better to go without any anti-virus after all instead of downloading a cracked version which does exact opposite of what it is supposed to do.
Still, to be forewarned is to be forearmed and only the wise will heed the advice of our OP and discard every free antivirus softwares on mostly devices that is connected to our wallets or exchange service, because though we may think we are vigilant, but a mistake click on a link or advert could jeopardize every long term or short term plan we have solidly envisioned.
Firstly, anti-virus is not a foolproof security measure when it comes to saving us from malicious attacks on our crypto holdings. Still, it gives extra protection at least for the known malicious attacks.
We will end up in this kind of website when we try to download the software for completely free and that's the mother of all evil when it comes to the Windows platform, it's just better to go without any anti-virus after all instead of downloading a cracked version which does exact opposite of what it is supposed to do.
We will end up in this kind of website when we try to download the software for completely free and that's the mother of all evil when it comes to the Windows platform, it's just better to go without any anti-virus after all instead of downloading a cracked version which does exact opposite of what it is supposed to do.
I use Windows. I had no problems while using it. But I have been suffering from a problem for the last two months. When I downloaded anti-virus, it downloaded a virus, which gave me a lot of trouble when browsing the internet. After much searching, I couldn't solve it, so I deleted the five program files from Hide Apps. There are no more problems now. Windows sets no more problems if you download something carefully while downloading it.
I had a similar problem in 2020. My device was controlled by someone else. 25$ was deducted from my trust wallet; I didn't understand anything, but when I understood, I was careful, and now I don't have any problems. After a few days, check to see if any hidden viruses have been downloaded.
I had a similar problem in 2020. My device was controlled by someone else. 25$ was deducted from my trust wallet; I didn't understand anything, but when I understood, I was careful, and now I don't have any problems. After a few days, check to see if any hidden viruses have been downloaded.
And this is why (now I am being cliche here, so bear with me) I don't like to use Windows. Because on Linux I can just download ClamAV from my package manager - bam. All set up, automatic updates and everything.
It is way too easy to get shot in the foot when you use Windows - even the anti-virus website might be booby-trapped. To say nothing about all the personal data and adware/spyware an antivirus might bundle with your program if you're unlucky.
It is way too easy to get shot in the foot when you use Windows - even the anti-virus website might be booby-trapped. To say nothing about all the personal data and adware/spyware an antivirus might bundle with your program if you're unlucky.
So now it begs the question that if we are in crypto space, we should really be alert on everything we click and downloaded, even anti-virus software because we could be trick by going into this kind of websites and we thought that we are safe.
Sometimes, when you browse blogs and websites, you may be directly redirected to phishing sites that appear as pop-ups in advertisements. You might also find that fake antivirus programs, Cleaner software, or programs containing Trojans have been automatically downloaded. Indeed, people can make a significant mistake by opening and installing these malicious programs on their main computer used for cryptocurrency investments after feeling reassured by reading that the downloaded program is legitimate software from companies like Avast or Bitdefender, etc. It is worth noting that scammers pour poison into honey. They create their malicious programs to impersonate the names of protection/security and maintenance programs and the like so as not to raise any suspicion in the minds of their victims and then easily steal their computers. Anyone must add browser extensions to detect phishing sites and block advertisements, avoid using their main computer online, and purchase dedicated hardware for their long-term investments.
But what if the attack is on the anti-virus itself like the following?
-
Another negative effect that always comes into consideration is that I will not use a free anti-virus on my device. Using a paid anti-virus tends to be safer, although the negative effects that will occur later cannot be avoided.-
I don't know how because I'm not an expert. I realize that I'm not great at things like that, so I'm very careful and I separate each device's function.
Warez, crack softwares and others are really dangerous to crypto investors, specially if we have big amounts in our wallet and we uses our laptop that have our crypto for every day use. Before I used to download a lot from this crack sites, but that is before my crypto journey and it really mess up my laptop and I have to re-format it several times.
But when I involved myself here, the first thing I've learn from this community is how to take care and how to practice safe hygiene so that we won't get this malware and steal our cryptos. And this criminals uses really sophisticated attack and now even anti viruses are not safe from them.
But when I involved myself here, the first thing I've learn from this community is how to take care and how to practice safe hygiene so that we won't get this malware and steal our cryptos. And this criminals uses really sophisticated attack and now even anti viruses are not safe from them.
It's not only about anti-viruses or any other software one can download, these digital stealers are into everything that is available online and we as users need to be careful in everything we do.
When it comes to cryptocurrencies and finances, we need to make sure that we use devices containing our wallets and financial apps with extreme care and should never download things that we think can have a slight chance of compromising our privacy and security.
When it comes to cryptocurrencies and finances, we need to make sure that we use devices containing our wallets and financial apps with extreme care and should never download things that we think can have a slight chance of compromising our privacy and security.
Hackers took control of my laptop once I downloaded Anti-virus. at that time only automatic browser was opening on my laptop and automatically started browsing various websites. At that time my 56 ETH in Metamask got hacked. Which was the first incident of 2019. Since then I don't use any cracked software and I don't use Anti virus either. I am getting enough security through Windows defender. It does not allow any crack software to be installed. Due to which no malware software is installed. I haven't been hacked since that incident
So now it begs the question that if we are in crypto space, we should really be alert on everything we click and downloaded, even anti-virus software because we could be trick by going into this kind of websites and we thought that we are safe.
Yes, and that is why it is advisable not to trust/rely on anti virus softwares to completely protect your assets from malwares/viruses, but you should protect your asset by keeping it offline, in a hardware wallet.And also that we are about to hit the bull run, the cyber criminals activity are ramping up their activity against us. So be very very careful everyone.
Cybercriminals are always around, in any period in the market. Thus it is imperative to adhere to all the necessary safety measures that has been discussed endlessly in this forum, if your keys are online, any small mistake can be costly, but when they are offline, the risk is greatly reduced.
Was just browsing when I saw this news, regarding malicious and fake anti-virus sites. Of course, you will question, why it is related to crypto?, the answer is that because one of the tenant for being a crypto enthusiast so that we will not get phished by malwares that can still our crypto assets is to make sure that our anti-virus is updated.
But what if the attack is on the anti-virus itself like the following?
And as you can see in the images, it's hard to see that this is a malicious sites and not the real one.
1. The site hosting "avast-securedownload . com" is a spyware and a stealer,
2. While the "bitdefender-app. com" has been injected with Lumma.
3. While "malwarebytes. pro" has a payload of StealC.
https://www.trellix.com/blogs/research/a-catalog-of-hazardous-av-sites-a-tale-of-malware-hosting/
So now it begs the question that if we are in crypto space, we should really be alert on everything we click and downloaded, even anti-virus software because we could be trick by going into this kind of websites and we thought that we are safe.
And also that we are about to hit the bull run, the cyber criminals activity are ramping up their activity against us. So be very very careful everyone.
But what if the attack is on the anti-virus itself like the following?
Code:
avast-securedownload.com (Avast.apk)
bitdefender-app.com (setup-win-x86-x64.exe.zip)
malwarebytes.pro (MBSetup.rar)
bitdefender-app.com (setup-win-x86-x64.exe.zip)
malwarebytes.pro (MBSetup.rar)
And as you can see in the images, it's hard to see that this is a malicious sites and not the real one.
1. The site hosting "avast-securedownload . com" is a spyware and a stealer,
2. While the "bitdefender-app. com" has been injected with Lumma.
Quote
Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.
3. While "malwarebytes. pro" has a payload of StealC.
Quote
Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.
https://www.trellix.com/blogs/research/a-catalog-of-hazardous-av-sites-a-tale-of-malware-hosting/
So now it begs the question that if we are in crypto space, we should really be alert on everything we click and downloaded, even anti-virus software because we could be trick by going into this kind of websites and we thought that we are safe.
And also that we are about to hit the bull run, the cyber criminals activity are ramping up their activity against us. So be very very careful everyone.
Jump to: