Bkav warns of new lethal malware

Created 26 May 2017
  • PDF
Editor Choice
Share
(1 vote, average 5.00 out of 5)

Internet security firm Bkav has warned of a new strain of malware dubbed EternalRocks that is said to be more dangerous than the ransomware WannaCry, according to its statement on the security forum WhiteHat.

The new worm, similar to WannaCry, attacks the Server Message Block (SMB) vulnerability on Windows-based computers.

In particular, during the first stage, EternalRocks downloads the Tor web browser in the affected computers and then uses the application to connect to the command-and-control server located on the Tor network.

After 24 hours, the second stage starts, but the malware delays action in an attempt to remain undetectable. EternalRocks downloads all the SMB exploits to the infected computer, and scans the Internet for opening SMB ports to spread itself to other vulnerable systems as well.

According to Bkav, the new worm is far more dangerous than WannaCry. Instead of blackmailing users of infected computers, it gains unauthorized control on these computers to launch cyberattacks in the future.

The malicious worm will likely spread more widely than its predecessor through intranets, especially among unpatched Windows computers.

Ngo Tuan Anh, vice president of Cybersecurity at Bkav, said SMB vulnerabilities continue to be exploited by hackers to spread malicious codes and install spyware in order to perform intentional attacks.

Security experts said that the distribution of ransomware worms and others like EternalRocks is aimed at destroying defense and security systems of individuals and enterprises.

 

 

Source: SGT 

Maybe You Also Interesting :

» Budget, language constraints hinder InfoSec project

With the world getting ever flatter in the digital era, Việt Nam has realised the need to protect itself against information threats in the world of cyber...

» Vietnamese users lose $540 million from viruses: Bkav

Việt Nam's leading internet security firm, Bách Khoa Internetwork Security Centre (BKAV), announced that Vietnamese users lost some VNĐ12.3 trillion...

» Facebook virus mining Bitcoin spreads in Vietnam

HANOI - More than 12,600 computers had been infected with a Facebook virus that mines Bitcoin in Vietnam as of 2 p.m. on December 21, according to network...

Popular News Categories:

- Asia & Asean  |  EU & Russia  |  America

- Facts  |  Urban  |  Faculty  |  Environment

- Business  |  Finance  |  Market Health

- Destination  |  Cuisine  |  Arts Music

- Cinema  |  Soccer  |  Sports  |  IT & Internet