This undetectable malware kit packs a whole load of threats into a single package

Date:
Fri, 13 May 2022 15:05:02 +0000

Description:
New Eternity Project malware is one of the most terrifying strains weve seen in a while.

FULL STORY ======================================================================

Cybersecurity researchers have identified a dangerous new malware
subscription service capable of facilitating a wide variety of attacks.

Branded the Eternity Project, the modular malware kit contains functionality that enables buyers to steal passwords and credit card information, launch ransomware attacks, infect victims with cryptomining malware and more.

In future, the malware authors also intend to deliver new features, including a utility that helps users launch targeted DDoS attacks.

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022 . Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey to get the bookazine, worth $10.99/10.99. Dangerous malware

The Eternity Project kit is being marketed in a Telegram channel with roughly 500 members, which is used by the developers to announce new features and instruct buyers on how to deploy the malware most effectively.

After selecting their desired feature set and paying the corresponding fee in cryptocurrency, buyers can reportedly utilize the Telegram Bot to compile the binary automatically. The ransomware module is the most expensive of all (at $490/year), but channel members can purchase the crypto miner for less than $100/year. Read more

Battle.net hit by huge DDoS attack

The little-known pact at the heart of cybersecurity

REvil ransomware is officially back in action

A deep-dive analysis of the infostealer module also highlights the
versatility of the malware. According to researchers, this single utility can be used to harvest various data from a diverse range of apps, from web browsers and crypto wallets to VPN clients, messaging apps and more.

Worryingly, the Eternity Project toolkit is supposedly capable of bypassing antivirus and endpoint protection services too, a claim corroborated by Virus Total tests. Researchers at Cyble, the company responsible for identifying
the threat, also say the malware is actively circulating in the wild.

Despite the range of threats posed by Eternity Project malware, Cyble says there are a few ways people can protect themselves. The best-practice advice includes maintaining regular data backups , ensuring software is always up to date and refraining from opening untrusted links and email attachments. Keep your fleet's software up to date with the best patch management services around

Via BleepingComputer



======================================================================
Link to news story: https://www.techradar.com/news/this-undetectable-malware-kit-packs-a-whole-loa d-of-threats-into-a-single-package/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)