Government Organizations from Asia-Pacific Region Targeted with EvilGrab Malware

snoopy · Sep 20, 2013

Government Organizations from Asia-Pacific Region Targeted with EvilGrab Malware

Researchers have been monitoring a new malware family that’s currently being used in targeted attacks against organizations – mainly from the government sector – located in the Asia-Pacific region. The malware, dubbed EvilGrab, is designed to steal information from infected computers.
According to Trend Micro, the threat mainly targets organizations from China and Japan. Cybercriminals are distributing the malware with the aid of spear phishing emails that carry malicious Microsoft Office documents.

One executable file and two .dll files represent EvilGrab’s main components. The .exe file installs the other components. One of the .dll files is the main backdoor component, loaded by the other .dll file. In some cases, the .exe file is deleted after installation. This is done in an effort to cover its tracks.

Once it’s installed, EvilGrab starts stealing information. The threat is capable of grabbing audio and video files played on the system with the aid of standard Windows APIs. In addition, it can take screenshots, log keystrokes, and steal Internet Explorer and Outlook credentials. The stolen information is uploaded to a server controlled by the cybercriminals.
Click to expand...

Story continued here: http://news.softpedia.com/news/Gove...n-Targeted-with-EvilGrab-Malware-384578.shtml

Log in or Sign up

Government Organizations from Asia-Pacific Region Targeted with EvilGrab Malware

snoopy Registered Members

Share This Page

Log in or Sign up

Government Organizations from Asia-Pacific Region Targeted with EvilGrab Malware

snoopy Registered Members

Share This Page

Useful Searches