New Delhi -°C
Today in New Delhi, India

Oct 17, 2019-Thursday



Select city

Metro cities - Delhi, Mumbai, Chennai, Kolkata

Other cities - Noida, Gurgaon, Bengaluru, Hyderabad, Bhopal , Chandigarh , Dehradun, Indore, Jaipur, Lucknow, Patna, Ranchi

Thursday, Oct 17, 2019

Microsoft discovers malware ‘Nodersok’ that turns PCs into zombie proxies

After infecting a PC, the Nodersok malware turns them into proxies to conduct cyber attacks.

tech Updated: Sep 29, 2019 16:52 IST
Indo Asian News Service
Indo Asian News Service
San Francisco
Microsoft spots malware that turns PCs into zombie proxies
Microsoft spots malware that turns PCs into zombie proxies(REUTERS)

Researchers at Microsoft have uncovered a new malware campaign that is infecting thousands computers across the world. After infecting a PC, the malware, dubbed Nodersok, can turn them into proxies for launching other cyber attacks.

“The majority of targets are consumers, but about 3 per cent of encounters are observed in organisations in sectors like education, professional services, healthcare, finance, and retail,” Microsoft Defender Advanced Threat Protection (ATP) Research team said.

“The campaign is particularly interesting not only because it employs advanced fileless techniques, but also because it relies on an elusive network infrastructure that causes the attack to fly under the radar,” the researchers wrote.

The attack begins when a user downloads and runs an HTML application (HTA) file named Player1566444384.hta.

The digits in the file name differ in every attack. Analysis of Microsoft Defender ATP telemetry pointed to compromised advertisements as the most likely infection vector for delivering the HTA files.

Executing those files kickstart a process that opens up Powershell scripts, Excel and JavaScript to end up downloading and installing the Nodersok malware, The Inquirer reported.

First Published: Sep 29, 2019 16:52 IST

top news