New York, NY – Cyber experts are raising alarms about a new and sophisticated malware that poses as popular programs like Google Chrome and Microsoft Word to steal money from Microsoft device owners. Since March, Proofpoint, an online protection firm, has been tracking a malicious campaign orchestrated by cybercriminals, with a recent surge in distribution of the malware this month.
This malware, disguised as fake updates in internet browsers and software programs, tricks users into downloading harmful code that can ultimately lead to the theft of cryptocurrencies and sensitive personal information. The attack involves a fake update prompt on Google Chrome, directing users to copy and paste code into Microsoft’s PowerShell program, allowing the attacker to gain access to victims’ cryptocurrency funds.
Additionally, another method of this attack involves emails that appear work-related, containing HTML files that impersonate Microsoft Word and prompt users to open PowerShell and copy malicious code. Proofpoint reported that this campaign targeted over 100,000 messages and thousands of organizations globally, showing the widespread impact of the malware.
OneDrive, Microsoft’s cloud storage service, was also mimicked by the malware for nefarious purposes, using cleverly crafted fake error messages to deceive users into taking prompt action without considering the risks involved. While the attack chain requires significant user interaction to be successful, experts warn users to be cautious and avoid downloading anything unauthorized or suspicious.
It’s important to note that legitimate programs like Chrome and Word will never ask users to manually input code into another application for basic functions. This serves as a reminder to users to exercise caution and remain vigilant against potential cyber threats, especially those that mimic trusted programs and services. By staying informed and taking proactive steps to enhance cybersecurity measures, individuals can better protect themselves from falling victim to such malicious attacks in the future.