www.itfunk.orgwww.itfunk.orgwww.itfunk.org
  • Home
  • Tech News
    Tech NewsShow More
    The Hidden Sabotage: How Malicious Go Modules Quietly Crashed Linux Systems
    6 Min Read
    Agentic AI: The Next Frontier in Cybersecurity Defense and Risk​
    5 Min Read
    Cybersecurity CEO Arrested for Allegedly Installing Malware on Hospital Computers: A Stark Reminder of Insider Threats
    8 Min Read
    Cybercriminals Hijack Google’s Reputation
    7 Min Read
    Apple and Google Join Forces to Patch Actively Exploited Zero-Day Vulnerabilities in iOS and macOS
    5 Min Read
  • Cyber Threats
    • Malware
    • Ransomware
    • Trojans
    • Adware
    • Browser Hijackers
    • Mac Malware
    • Android Threats
    • iPhone Threats
    • Potentially Unwanted Programs (PUPs)
    • Online Scams
  • How To Guides
    How To GuidesShow More
    Nviqri Someq Utils Unwanted Application
    4 Min Read
    How to Deal With Rbx.fund Scam
    4 Min Read
    How to Jailbreak DeepSeek: Unlocking AI Without Restrictions
    4 Min Read
    Why Streaming Services Geo-Restrict Content?
    10 Min Read
    Anonymous France Ransomware: A Comprehensive Guide
    9 Min Read
  • Product Reviews
    • Hardware
    • Software
  • IT/Cybersecurity Best Practices
    IT/Cybersecurity Best PracticesShow More
    Affordable Endpoint Protection Platforms (EPP) for Small Businesses
    5 Min Read
    Outlaw Malware: A Persistent Threat Exploiting Linux Servers
    4 Min Read
    CVE-2024-48248: Critical NAKIVO Backup & Replication Flaw Actively Exploited—Patch Immediately
    6 Min Read
    How to Jailbreak DeepSeek: Unlocking AI Without Restrictions
    4 Min Read
    Microsoft Patches Critical Security Flaws in Azure AI Face Service and Microsoft Account
    5 Min Read
  • FREE SCAN
  • Cybersecurity for Business
Search
  • ABOUT US
  • TERMS AND SERVICES
  • SITEMAP
  • CONTACT US
© 2023 ITFunk.org. All Rights Reserved.
Reading: Java-based malware STRRAT steals credentials & comes with .CRIMSON ransomware module
Share
Notification Show More
Font ResizerAa
www.itfunk.orgwww.itfunk.org
Font ResizerAa
  • Tech News
  • How To Guides
  • Cyber Threats
  • Product Reviews
  • Cybersecurity for Business
  • Free Scan
Search
  • Home
  • Tech News
  • Cyber Threats
    • Malware
    • Ransomware
    • Trojans
    • Adware
    • Browser Hijackers
    • Mac Malware
    • Android Threats
    • iPhone Threats
    • Potentially Unwanted Programs (PUPs)
    • Online Scams
  • How To Guides
  • Product Reviews
    • Hardware
    • Software
  • IT/Cybersecurity Best Practices
  • Cybersecurity for Business
  • FREE SCAN
Follow US
  • ABOUT US
  • TERMS AND SERVICES
  • SITEMAP
  • CONTACT US
© 2023 ITFunk.org All Rights Reserved.
www.itfunk.org > Blog > Cyber Threats > Ransomware > Java-based malware STRRAT steals credentials & comes with .CRIMSON ransomware module
Ransomware

Java-based malware STRRAT steals credentials & comes with .CRIMSON ransomware module

ITFunk Research
Last updated: October 24, 2023 4:33 pm
ITFunk Research
Share
Java-based malware STRRAT steals credentials & comes with .CRIMSON ransomware module
SHARE

According to reports, a malware strain known as STRRAT malware is being deployed as part of the infamous .CRIMSON ransomware. 

Contents
What is STRRAT Malware?How Can Users Defend Against Emails with Malicious Payloads

What is STRRAT Malware?

Researchers at G Data Solutions first discovered STRRAT malware in spam emails. The emails arrived with the attachment labeled ‘NEW ORDER.jar.’ When that attachment is opened, it retrieves a VBScript, saved under the name ‘bqhoonmpho.vbs.’ It also downloads Java Runtime Environment and infects machines on which Java wasn’t installed.

G Data Solutions researchers also found that STRRAT malware was able to steal credentials and passwords for emails and browsers through keylogging. The malware also comes with a ransomware module appending files with the .CRIMSON extension. Strangely enough, victims can reportedly recover their data by removing the extension from affected file names.

How Can Users Defend Against Emails with Malicious Payloads

Computer users can defend themselves from malicious payloads by employing better security protocols. Companies can conduct awareness training and educate employees about the dangers of email phishing. Training programs should include simulated phishing exercises to test employee familiarity with hackers’ methods and dissuade them from falling victim to common schemes.

IT personnel should also add additional security guards like banners that flag emails from untrusted sources. It’s important for emails coming from blacklisted or unknown domains to reduce the chance of any macros being executed from malicious email attachments.

Hackers can use STRRAT malware to steal credentials stored on web browsers and email accounts. Threat actors can also use this remote access Trojan to steal login info and use it for fraudulent transactions. The keylogging function also allows attackers to gather information, including email addresses, usernames, passwords, credit card data, and other sensitive data. The STRRAT remote access trojan can also be used to execute commands that allow attackers complete access to a computer, using it to install additional malware, ransomware, or cryptocurrency mining code.

You Might Also Like

GovCrypt Ransomware
BackLock Ransomware (.backlock)
ITSA Ransomware
RALEIGHRAD Ransomware
LegionRoot Ransomware
TAGGED:Ransomware

Sign Up For Daily Newsletter

Be keep up! Get the latest breaking news delivered straight to your inbox.
By signing up, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy. You may unsubscribe at any time.
Share This Article
Facebook Copy Link Print
Share
Previous Article A report reveals over 15 billions of stolen login credentials from more than 100,000 data breaches are for sale on the dark web
Next Article IcedID banking trojan tricks users with COVID-19 & FMLA (Family and Medical Leave Act) phishing emails
Leave a Comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Think You're Infected? Let's Find Out – FAST.
SpyHunter identifies viruses, ransomware, and hidden threats in under a minute.
🛡️ Scan Your Device for Free
✅ Free Scan Available • ⭐ Catches malware instantly
//

Check in Daily for the best technology and Cybersecurity based content on the internet.

Quick Link

  • ABOUT US
  • TERMS AND SERVICES
  • SITEMAP
  • CONTACT US

Support

Sign Up for Our Newesletter

Subscribe to our newsletter to get our newest articles instantly!

 

www.itfunk.orgwww.itfunk.org
© 2023 www.itfunk.org. All Rights Reserved.
  • ABOUT US
  • TERMS AND SERVICES
  • SITEMAP
  • CONTACT US
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?