Slashdot Mirror

← Back to Stories (view on slashdot.org)

'StrongPity' Malware Infects Users Through Legitimate WinRAR and TrueCrypt Installers (neowin.net)

Posted by msmash on from the security-blues dept.

Kaspersky Labs has revealed a new strain of malware -- named 'StrongPity' which targets users looking for two popular applications - WinRaR and TrueCrypt. The malware contains components that not only has the ability to give attackers complete control on the victim's computer, but also steal disk contents and download other software that the cybercriminals need. From a Neowin report: To be able to gather victims, the attackers have built special fake websites that supposedly host the two programs. One instance that was discovered by the researchers is that the criminals transposed two letters in a domain name, in order to fool the potential victim into thinking that the program was a legitimate WinRAR installer website.

4 of 105 comments (clear)

  1. Title smells like bullshit by truedfx · · Score: 5, Insightful

    "through legitimate WinRAR and TrueCrypt installers"? By what logic are those installers legitimate?

  2. Legitimate by dejitaru · · Score: 3, Insightful

    If it's malware infected, it's not legitimate.

  3. What about TrueCrypt... by HBI · · Score: 1, Insightful

    Why are people still using something that the authors of same apparently think is compromised?

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  4. Why is this here? by thegarbz · · Score: 3, Insightful

    Hasn't this been done 1000 times before? What's new here? Why is this newsworthy?