AdvisorsBot Trojan is a newly discovered hacking weapon which is being distributed against targets worldwide. Its modular engine allows the criminal operators to carry out complex infections utilizing a variety of modules. Our article looks at the typical samples and shows how users can remove active infections.
AdvisorsBot Trojan – Distribution Methods
The AdvisorsBot Trojan has been found in a recent attack campaign, the first instances of which were reported in May 2018. It appears that the ongoing infiltration attempts target primarily companies and businesses: restaurants, telecom providers and hotels. It appears that the hackers are using it as a weapon for global infiltration — reports of infected machines have been received from different parts of the world.
One of the most popular distribution methods for spreading the AdvisorsBot Trojan is the coordinated distribution of email messages. The hackers use several templates tht attempt to blackmail the victims into thinking that they are receiving messages from partners, customer or Internet services that they use. Interaction with them will lead to the malware infection. Examples of social engineering tactics include the following message types:
- Fake Customer Complaint — Hotel owners and staff can receive a fake message that appears to be coming from a guest claiming that they have been double charged for a room reservation or service. The emails feature a rich text document (.doc Word file format) (Read more...)
*** This is a Security Bloggers Network syndicated blog from How to, Technology and PC Security Forum | SensorsTechForum.com authored by Martin Beltov. Read the original post at: https://sensorstechforum.com/advisorsbot-trojan-removal-identify-delete-active-infections/