ReasonLabs warned of malicious software with "Russian trace" – Bits Media

ReasonLabs cybersecurity specialists reported harmful software for hidden Monero mining in pirate copies of the last film about Spider-Man.

Reasonlabs warned, what users, who are trying to download illegal copies of the movie "Spider-Man: No Way Home "C torrent sites, They can download the infected file "Spiderman_net_putidomoi.torrent.exe". Given the name of the file, ReasonLabs believes, that its source "is most likely a Russian torrent tracker".

According to cybersecurity experts, After getting to the victim’s device, the malicious program adds its files to the exceptions of the built -in Windows Defender antivirus. Next, two new Sihost64.exe and WR64.exe files are launched, and then the XMRIG miner for Monero production.

ReasonLabs pays attention, that even if the viral program does not steal personal information, It is dangerous for the device and brings losses to the user. Due to mining, the load of the central processor increases, that slows down the device. In this case, overheating and damage to equipment may occur. Besides, Hidden mining increases electricity consumption.

ReasonLabs experts recommend "show special caution when loading any content from unofficial sources". The virus can be infected as a document in an email from an unknown sender, and a hacked program from a suspicious site or a file from a torrent tracker.

Recall, that this year Google has declared a real war to Russian hackers. At the beginning of the month, the corporation filed a lawsuit against the founders of Glupteba Enterprise Dmitry Staroviko and Alexander Filippov, accusing them of cryptodjacking and embezzlement of data. The lawsuit says, that they used a botnet using a bitcoin blockchain.

Last month, the Google threat analysis group announced a series of phishing attacks on the channels in YouTube. The company attributes to hackers, recruited in Russian -speaking forums. According to analysts, Russian -speaking hackers cracked on YouTube for fraud with cryptocurrencies.