An updated sample of the CopperStealer malware has been detected, infecting devices via websites providing fraudulent cracks for applications and other software.
Cyber attackers employ these bogus apps to perform a range of assaults.
The hackers in this assault operation took advantage of the desire for cracks by releasing a phoney cracked programme that actually contained malware.
The infection starts with a website or Telegram channel offering/presenting false cracks for downloading and installing the needed cracks.
The downloaded archive files include a password-protected text file and another encrypted archive.
The decrypted archive displays the executable files when the password specified in the text file is typed. There are two files in this sample: CopperStealer and VidarStealer.
What are the impacts of Copper Stealer and Vidar Stealer on the systems?
CopperStealer and Vidar stealer can cause many system infections, major privacy problems, financial losses, and identity theft.
- CopperStealer: The primary function of CopperStealer is to steal stored login information - usernames and passwords - as well as internet cookies from certain browsers. Mostly focuses on the login details for business-oriented Facebook and Instagram accounts. CopperStealer variants also seek login credentials for platforms and services such as Twitter, Tumblr, Apple, Amazon, Bing, and Apple. The malware can steal Facebook-related credentials from browsers such as Google Chrome, Microsoft Edge, Mozilla Firefox, Opera, and Yandex.
- Vidar stealer: The most common ways for this malware to propagate are through pirated software and targeted phishing efforts. Vidar stealer is capable of stealing credit cards, usernames, passwords, data, and screenshots of the user's desktop. The malware steals data from a range of browsers and other system apps. It can also steal cryptocurrency wallets such as Bitcoin and Ethereum.
Safety first
Attackers can utilise data stealers like CopperStealer to steal sensitive information for more illegal reasons. Users can stay secure by taking the following precautions:
- Downloading cracks from third-party websites should be avoided.
- Keep the systems up to date with the newest patches.
- It is highly advised that security detection and prevention technologies be enabled to safeguard systems from attacks.
