Once the victim enables macros on the attached document, the computer becomes compromised, and the attacker is able to record the user’s screen. In July, Varenyky launched a sextortion campaign in France, distributed through spam email attachments disguised as bill documents. Instead of intercepting SMS messages, which became harder for attackers thanks to Google’s new restrictions, this malware reads the notifications that appear on a device’s display in order to obtain the one-time password. It was the first malware discovered that is able to circumvent restrictions brought in by Google in March 2019, which aimed to strengthen SMS-based two-factor authentication (2FA). This malware is used to phish for login credentials to BtcTurk, a Turkish cryptocurrency exchange. Distributed via online forums, these malware files have the capacity to not only encrypt files, but to also send text messages to the victim’s contact list. Once the malware is unleashed via email, it can take screenshots, log keystrokes, access the clipboard, retrieve and encrypt files, and collect the victim’s geolocation.ĭiscovered after a two-year decline in instances of Android ransomware, Android/Filecoder.C encrypts the files on a mobile device before demanding a payment in Bitcoin for their decryption. The operators use Machete as a tool for spearphishing, predominantly targeting government organizations, such as the military, education, police, and foreign affairs. Machete is malware that has been used in cyberespionage operations primarily in Venezuela, but also in Ecuador, Colombia, and Nicaragua.

and his advisor, Professor Len Adleman PhD., which laid the cornerstone for future research into computer threats.ĮSET is marking this year’s celebration by taking a look at some of the most pertinent malware discoveries of the year 2019, in order to emphasize the importance of taking proactive countermeasures against malware and of implementing cybersecurity best practices.

Bratislava, 3 November 2019 – Today, we celebrate Antimalware Day, founded by ESET two years ago, to honor the visionary work of Fred Cohen, Ph.D.

Antimalware scan