Dangerous new phishing campaign infects Windows devices with malicious Linux VM

When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.

The virtual machine comes preloaded with abackdoor, granting the crooks unabated access to the compromised devices.

A report from cybersecurity researchers Securonix dubbed the campaign CRON#TRAP.

That way, the victims will think that the survey was unavailable at the time.

Tricking the AV

Since QEMU is legitimate, no antivirus programs flag it as malicious.

Since the campaign starts with a simple phishing email, Securonix advises care when handling inbound emails.

ViaBleepingComputer

You might also like