New CRON#TRAP Malware Infects Windows by Hiding in ... - The Hacker News
6 days ago · New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus. Nov 08, 2024 Ravie Lakshmanan Malware / Virtualization. Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts.
Windows infected with backdoored Linux VMs in new phishing …
Nov 4, 2024 · 10:53 AM. 3. A new phishing campaign dubbed 'CRON#TRAP' infects Windows with a Linux virtual machine that contains a built-in backdoor to give stealthy access to corporate networks. Using virtual ...
CRON#TRAP Campaign Attacks Windows Machine With …
Nov 6, 2024 · CRON#TRAP Campaign Attacking Windows Machine. CRON#TRAP is a sophisticated cyber attack campaign that begins with a “phishing email” containing a malicious shortcut (‘.lnk’) file disguised as “OneAmerica Survey.”. OneAmerica Survey.zip (Source – Securonix) When executed, this file launches a “hidden 285MB package” that deploys ...
CRON#TRAP Exposed: Innovative Malware in Emulated Linux …
CRON#TRAP detection and prevention require a multidimensional approach to safeguarding systems. In particular, to detect CRON#TRAP, it's vital to watch out for unusual files and processes - such as large and oddly named ZIP files appearing unexpectedly or shortcut files appearing in unusual places - which could signal potential CRON#TRAP attacks.
Stealthy CRON#TRAP Malware Evades Antivirus by Hiding in …
Cybersecurity researchers have uncovered a sophisticated malware campaign, dubbed CRON#TRAP, that infects Windows systems by deploying a hidden Linux virtual machine (VM). This innovative...
CRON#TRAP: Emulated Linux Environments as the Latest Tactic in …
Nov 4, 2024 · The CRON#TRAP campaign demonstrates a sophisticated and novel approach to compromising systems through a combination of phishing, emulated environments, and stealthy pre-configured tunneling. What makes this campaign so interesting is the fact that it begins with a rather standard sequence of events, a phishing lure, leading to the download of ...
Hackers Deploy CRON#TRAP for Persistent Linux System Backdoors
Nov 5, 2024 · CRON#TRAP is a new phishing attack using emulated Linux environments to bypass security and establish persistent backdoors. Leveraging QEMU and Chisel, hackers gain covert access to steal data and control systems.
Dangerous new phishing campaign infects Windows devices with …
Nov 5, 2024 · A report from cybersecurity researchers Securonix dubbed the campaign ‘CRON#TRAP’. It starts with a fake “OneAmerica” survey which distributes the VM installation file (285 MB), and a fake ...
Attacker Hides Payload in Emulated Linux Environment
Nov 5, 2024 · CRON#TRAP, as Securonix is tracking the campaign, is notable for the attacker's use of a custom emulated QEMU Linux environment to persist on endpoints and execute a variety of malicious activity ...
CRON#TRAP: Emulated Linux environment as backdoor after …
Nov 6, 2024 · Dirk Knop. IT researchers from Securonix have discovered a new type of attack chain. The malware consists of an emulated Linux environment that the attackers install as a backdoor on compromised ...
- Some results have been removed