Recently, a security firm released a detailed report about a new thief in town, a new account-stealing malware, that spreads via fake software crack sites. The operators of this malware are using it to target the account credentials of several global giants, such as Google and Apple.
In January, a Twitter user named TheAnalyst shared a sample of the malware with Proofpoint researchers to investigate further. The investigation revealed several interesting aspects about the ongoing malicious activity of CopperStealer.
Connection with SilentFade malware
Proofpoint researchers have put CopperStealer within the same class of malware as StressPaint, SilentFade, FacebookRobot, and Scranos.
Account credentials of major service providers hold a good financial value, as these can be sold at a handsome price on underground forums. In addition, these credentials could be used to gain unauthorized access inside the targeted network. Therefore, it is important to stay protected, by limiting unnecessary access to accounts and implementing MFA.
This content was originally published here.