As we have already talked about in several posts, the attack phishing It has been one of the most used this past 2020. One of the purposes that we proposed for this 2021 was not to open emails from unknown users and much less open the attached files, if you have not read it yet, I will leave it to you here.
Well, a new attack phishing is circulating on the Internet, the phishing email offers victims a loan with very good and advantageous conditions that attracts the attention of users. What is unusual about this email is that it supposedly contains a video attachment about Trump.
It is suspected that cybercriminals have taken advantage of the media hype about this character to get victims to download the attached file and thus infect as many computers as possible.
If you try to open the file, a Java Archive (JAR) file, an installer for the QRat malware will run. This malware gives cybercriminals access to the infected computer, being able to steal confidential information from victims, such as password theft, keystroke logging, screenshots or browsing, and file theft, among others.
He Quaverse Remote Access Trojan (QRat) It first emerged in 2015 and is still very popular among “bad hackers” because it is very difficult to detect, it is located under many layers.
The funny thing about all this is that before being installed, a pop-up warning window appears that tells the user that the software they are installing can be used for remote access and if the user accepts, QRat will be downloaded to the system and the malware It will invade everything. That is why cybercriminals have taken advantage of the figure of trump so that users without thinking much accept any warning that the system indicates due to their desire to watch the video.
As a last sentence to get you thinking, I will just say a saying that my grandfather used to say, curiosity killed the cat.
