156
submitted 1 year ago by Raisin8659 to c/technology@lemmy.world

Summary

What is Trojan.Fruity.1?

  • A modular downloader trojan that can be used to distribute other malware.
  • Distributed through malicious websites and software installers that appear to be legitimate.
  • Once installed, Trojan.Fruity.1 begins a multi-stage infection process that can ultimately lead to the installation of the Remcos RAT spyware.

How does it work?

  • The trojan is implanted into legitimate programs, such as Python libraries, VLC mediaplayer, and VMWare virtualization software.
  • The trojan uses a variety of techniques to evade detection, including encryption, steganography, and process hollowing.
  • The trojan can be used to infect computers with other malware, such as ransomware, cryptominers, and backdoors.

How to prevent infection?

  • Only download software from trusted sources.
top 5 comments
sorted by: hot top controversial new old
[-] NightOwl@lemmy.one 26 points 1 year ago

When a visitor tries to download an app from a fake site, they are redirected to the MEGA file hosting service webpage, which offers them a zip file, containing a trojan installer package, for download.

Another reason to use adblockers. Does ads that are part of search engine results can be dangerous.

[-] Zeron@lemmy.world 16 points 1 year ago

Yep. There's a reason whenever i install an adblocker for a friend or family member they suddenly and mysteriously no longer "get viruses" anymore.

Ad blocking is a security measure, because these ad networks have zero accountability for what you are shown. I will never in a million years allow ads onto my network intentionally. If i deem a service good enough that i think they deserve my money, i grab some merch or throw them a donation. It gives them more than tens of thousands of my ad impressions ever would.

[-] Raisin8659 11 points 1 year ago

Yes, for home, if you are not installing ad-blockers for all your family members, you can set AdGuard DNS, etc., as DNS servers on your router to somewhat mitigate the ad/malware/scam problem for the entire location.

[-] d3Xt3r@lemmy.world 1 points 1 year ago* (last edited 1 year ago)

Windows computers

Never mind then. Another day, another new Windows malware, nothing to see here folks.

[-] hemmes@lemmy.world 9 points 1 year ago

infosec.pub has entered the chat

load more comments
view more: next ›
this post was submitted on 01 Aug 2023
156 points (98.1% liked)

Technology

59483 readers
2008 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS