The hardware device drivers of Microsoft Windows due to a
common design flaw left the entire systems of users compromised giving it to a
recently resuscitated Remote Tojan Access (RAT).
The RAT brought about a hack attack tool with a modified
format which as it turns out is absolutely free of cost.
The NanoCore RAT as it’s called, has been hovering around
the dark web for quite some time now. It was sold initially for $25 which is a
minimal amount for a hacking tool for Windows OS.
NanoCore’s cracked version, as soon as it appeared caused
quite a commotion amongst researchers and hackers.
Initially the “premium plugins” were especially paid for
privileges but the latest cracked version has it all for free.
The NanoCore coder had to be arrested given the rising
familiarity of the product and the fact that he was a part cybercrime!
Despite that, NanoCore thrived and generated other tool
variants RAT, Surprise Ransomware, LuminosityLink and of course the free
“highly modified” latest version.
The NanoCore RAT, per researchers is controlled by
way of easy security measures, no particular entry troubles and a really
uncomplicated interface to aid even the novice hackers.
There was an outburst of campaigns using the
very malware including:
·
Remote
shutdown and restart of Windows systems
·
Remote
file browsing on the infected system
·
Access
and control of Task Manager, mouse and Registry editor
·
Disabling
webcam lights to spy
·
Taking
over open webpages
·
Recovering
passwords and obtaining credentials
·
Remotely
operated “locker” for encryption
Owing it to the long presence of NanoCore the
techniques it uses are well known to the researchers. Scripting, registry keys
and malicious attachments are the three main categories that the researchers
found out.
The scripting threat’s basic solution is to
check Microsoft office files for macro code and “anomalous execution” of
legitimate scripting programs like PowerShell or Wscript.
The registry keys should be monitored for
updates and patch cycles and rigorous security implementations should be made
for behavioural detection.
Windows users should immediately go ahead and
get their systems updated and make sure all their applications are running the
way they actually should.
Additionally, Windows 10, 8.1 and 7 users should
especially keep a keen check on regular updates and patching!
