News

Rookit Scranos left China and seeks victims throughout the world

Multifunctional rootkit operators extended field of their activity outside China and now attack users all over the world.

As say specialists of Bitdefender company, the highest number of victims is noted in Romania, France, India, Brazil and Indonesia.

Scranos combines functions of backdoor, infostealer and advertisement software and can use all Windows versions, including Windows 10.

Despite Scranos is on a stage on development, even now it possess a substantial threat.


Illustration of how the dropper and rootkit operate.

It has module function and due to it can perform various tasks as extract cookie-files and account details in all browsers, steal payment data from users’ accounts on Facebook, Amazon and Airbnb; on behalf of a victim send requests on “adding friends” on Facebook; send fishing messages to users’ friends on Facebook; steal account details during Steam authorization; implement advertising software in Internet Explorer; install extensions for Chrome/Opera; subscribe victim on YouTube channels.

“This operation is constantly evolving, as demonstrated by the fact that its developers build in new functionalities rather than rely on external tools that may be detected as malicious. The attackers also started encrypting the dropper to disguise it”, – reported by researchers Bitdefender.

Malware is majorly spread though hacked software, so users that use to download and install such tools are at risk.

Source: www.bitdefender.com

Polina Lisovskaya

I works as a marketing manager for years now and loves searching for interesting topics for you

Recent Posts

Remove Pbmsoultions.com Pop-up Ads

About Pbmsoultions.com Pbmsoultions.com pop-ups can not launch out of the blue. If you have actually…

2 days ago

Remove Prizestash.com Pop-up Ads

About Prizestash.com Prizestash.com pop-ups can not expose out of the blue. If you have actually…

2 days ago

Remove Verifiedbreaking.com Pop-up Ads

About Verifiedbreaking.com Verifiedbreaking.com pop-ups can not launch out of nowhere. If you have actually clicked…

2 days ago

Remove Themoneyminutes.com Pop-up Ads

About Themoneyminutes.com Themoneyminutes.com pop-ups can not launch out of the blue. If you have actually…

2 days ago

Remove News-xcidizi.com Pop-up Ads

About News-xcidizi.com News-xcidizi.com pop-ups can not introduce out of nowhere. If you have clicked some…

2 days ago

Remove Everytraffic-flow.com Pop-up Ads

About Everytraffic-flow.com Everytraffic-flow.com pop-ups can not launch out of nowhere. If you have actually clicked…

2 days ago