Tag: installs | SpinSafe

Fake Windows 10 Updates Installs Ransomware! Some Microsoft Users Already Affected

May 1, 2022/in Internet Security

Fake Windows 10 updates were spotted by security experts. Some Microsoft consumers were already affected by the malicious enhancements.

Fake Windows 10 Updates Installs Ransomware! Some Microsoft Users Already Affected

(Photo : Photo by Drew Angerer/Getty Images)
A view of the new Microsoft Surface Laptop following a Microsoft launch event, May 2, 2017 in New York City. The Windows 10 S operating system is geared toward the education market and is Microsoft’s answer to Google’s Chrome OS.

Microsoft’s Windows systems versions are commonly targeted by hackers and other malicious actors. Now, their latest target is the predecessor of Windows 11.

Bleeping Computer reported that some Microsoft users already confirmed that their devices were infected after installing the fake updates.

But, how serious is the new fake Windows 10 installations?

Fake Windows 10 Updates Installs Ransomware!

Bleeping Computer’s experts said that while they were checking their official cybersecurity forums, they discovered that some Windows 10 users posted their complaints regarding the fake Windows 10 updates.

(Photo : Photo by Sean Gallup/Getty Images)
A participant sits with a laptop computer as he attends the annual Chaos Communication Congress of the Chaos Computer Club at the Berlin Congress Center on December 28, 2010 in Berlin, Germany. The Chaos Computer Club is Europe’s biggest network of computer hackers and its annual congress draws up to 3,000 participants.

Also Read: Windows 11 Pro To Soon Force Users To Create A Microsoft Account For Installation

“Hello fellas, my PC been infected by ransomware and my files have been encrypted with .yyqiidt file. Unfortunately, there is no decryptor yet<,” said an anonymous Microsoft consumer.

Now, cybersecurity experts confirmed the severity of these malicious links. They said that the fake PC updates would automatically install the Magniber ransomware.

Security researchers added that the fake updates are distributed in different files. These are the most common:

Win10.0_System_Upgrade_Software.msi

Security_Upgrade_Software_Win10.0.msi

Aside from these files, there are also other fake knowledge-based articles on Microsoft that can also install the Magniber…

Source…

New BHUNT Malware Targets Cryptocurrency Wallets via Software Installs – Bitcoin News

January 22, 2022/in Computer Security

Bitdefender, a cybersecurity and antivirus company, has detected BHUNT, a new kind of malware that targets cryptocurrency wallets via software installs. The malware works on top of installs of unsecured or cracked software, that already comes packaged with the system to be deployed on desktop environments. Once installed, the software extracts passphrases and seeds from popular wallets.

BHUNT Malware Spotted in the Wild

Bitdefender, a leading cybersecurity firm, has issued a report regarding a new kind of password stealer that focuses on cryptocurrency wallets users have on their PCs. BHUNT, as this new malware is called, enters computers through infected software installs, mostly of cracked software. According to the technical document issued on the software, BHUNT attacks Exodus, Electrum, Atomic, Jaxx, Ethereum, Bitcoin, and Litecoin wallets. Once installed, the software can transfer the funds of the users to another wallet, and also steal other private data residing in the infected computer.

Password stealers are not new to the PC sector, as computers can already be infected by various viruses that also have these capabilities. What is special about this software is that its presence is heavily encrypted and it is packaged as digitally signed software, but the issued certificate does not match with the binary of the program.

Infection and Prevention

Bitdefender concluded that BHUNT was released in the wild with no clear target by the way it has spread. On how the software spread, Bitdefender’s report states:

All our telemetry originated from home users who are more likely to have cryptocurrency wallet software installed on their systems. This target group is also more likely to install cracks for operating system software, which we suspect is the main infection source.

The company indicated the level of infections detected on a map, and the countries with the most infections presented were Australia, Egypt, Germany, India, Indonesia, Japan, Malaysia, Norway, Singapore, South Africa, Spain, and the U.S.

Bitdefender also issued recommendations to avoid being infected with BHUNT or with other, similar password-stealing malware. “The most effective way to…

Source…