Estamos vendo um ressurgimento do Trojan WMIC Demonic Astaroth - Cofense

Estamos vendo um ressurgimento do Trojan WMIC Demonic Astaroth - Cofense: By Jerome Doaty and Garrett Primm The Cofense™ Phishing Defense Center (PDC) has recently defended against a resurgence of Astaroth, with dozens of hits across our customer base in the last week. In just one week, some estimated 8,000 machines have been potentially compromised. The Astaroth trojan, named for its use of satanic variable names (the “Great Duke of Hell” in ancient lore), has been around since late 2017. Astaroth is known for infecting victims through fake invoice emails, the majority of which originate from a malicious sender impersonating legitimate services using cam.br domains. Fig. 1 Impersonating TicketLog This revived campaign...

explicita