New CRON#TRAP Malware Infects Windows by Hiding in ... - The Hacker News
6 days ago · New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus. Nov 08, 2024 Ravie Lakshmanan Malware / Virtualization. Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts.
CRON#TRAP Phishing Attack: A Linux VM Backdoor Hides Inside …
Nov 5, 2024 · CRON#TRAP is a recent phishing attack discovered by Securonix researchers, targeting corporate networks through a Linux VM deployed via phishing emails. The email, disguised as a survey from OneAmerica, contains a 285MB ZIP file with a Windows shortcut and a custom QEMU virtual machine. When the file is opened, it installs the Linux VM, named PivotBox, with a pre-configured backdoor for remote ...
Windows infected with backdoored Linux VMs in new phishing …
Nov 4, 2024 · 10:53 AM. 3. A new phishing campaign dubbed 'CRON#TRAP' infects Windows with a Linux virtual machine that contains a built-in backdoor to give stealthy access to corporate networks. Using virtual ...
New CRON#TRAP malware uses hidden Linux VM - dmnews.com
3 days ago · November 11, 2024. HiddenVM Malware. Cybersecurity researchers have discovered a new malware campaign that targets Windows systems by hiding in a Linux virtual machine. The campaign, called CRON# ...
CRON#TRAP Campaign Attacks Windows Machine With …
Nov 6, 2024 · CRON#TRAP Campaign Attacking Windows Machine. CRON#TRAP is a sophisticated cyber attack campaign that begins with a “phishing email” containing a malicious shortcut (‘.lnk’) file disguised as “OneAmerica Survey.”. OneAmerica Survey.zip (Source – Securonix) When executed, this file launches a “hidden 285MB package” that deploys ...
CRON#TRAP Exposed: Innovative Malware in Emulated Linux …
CRON#TRAP detection and prevention require a multidimensional approach to safeguarding systems. In particular, to detect CRON#TRAP, it's vital to watch out for unusual files and processes - such as large and oddly named ZIP files appearing unexpectedly or shortcut files appearing in unusual places - which could signal potential CRON#TRAP attacks.
Dangerous new phishing campaign infects Windows devices with …
Nov 5, 2024 · A report from cybersecurity researchers Securonix dubbed the campaign ‘CRON#TRAP’. It starts with a fake “OneAmerica” survey which distributes the VM installation file (285 MB), and a fake ...
CRON#TRAP: Emulated Linux Environments as the Latest Tactic in …
Nov 4, 2024 · The CRON#TRAP campaign demonstrates a sophisticated and novel approach to compromising systems through a combination of phishing, emulated environments, and stealthy pre-configured tunneling. What makes this campaign so interesting is the fact that it begins with a rather standard sequence of events, a phishing lure, leading to the download of ...
Hackers Deploy CRON#TRAP for Persistent Linux System Backdoors
Nov 5, 2024 · CRON#TRAP is a new phishing attack using emulated Linux environments to bypass security and establish persistent backdoors. Leveraging QEMU and Chisel, hackers gain covert access to steal data and control systems.
CRON#TRAP: Emulated Linux environment as backdoor after …
Nov 6, 2024 · Dirk Knop. IT researchers from Securonix have discovered a new type of attack chain. The malware consists of an emulated Linux environment that the attackers install as a backdoor on compromised ...
- Some results have been removed