New Mac OSX campaign detected.
Uses naive techniques to install proxy on infected computer. Proxy redirects to attacker controlled server on .onion
Malware spreads via a SPAM campaign of unknwon source.
.onion server seems to currently be offline.
Full report:
http://blog.checkpoint.com/2017/04/27/o ... s-traffic/
Uses naive techniques to install proxy on infected computer. Proxy redirects to attacker controlled server on .onion
Malware spreads via a SPAM campaign of unknwon source.
.onion server seems to currently be offline.
Full report:
http://blog.checkpoint.com/2017/04/27/o ... s-traffic/
