Chinese APT Hackers Attack Windows Users via FakeNarrator Malware to Implant PcShare Backdoor

[[correlate]]

Content source

https://gbhackers.com/fakenarrator-malware/?fbclid=IwAR2cMi1ufa-HAIaQQCjPRTb8RKB4_wzYrIg1vPswy6o2KMZFwIo20wnXPc4

Chinese APT hackers launching a FakeNarrator malware to attack technology companies using windows computers and implant modified version of open-source PcShare backdoor.

Threat actors loaded this open-source software in victims machine with the help of legitimate NVIDIA application and also deploy the FakeNarrator screen reader application to replace the Windows built-in Narrator, a free screen reader in Microsoft Windows nad bypass the Windows “Easy access” feature

Chinese APT Hackers Attack Windows Users via FakeNarrator Malware to Implant PcShare Backdoor

Chinese APT hackers launching a FakeNarrator malware to attack technology companies using windows computers and implant modified version of open-source PcShare backdoor.

gbhackers.com

 

[notabot]

Chinese APT Hackers Attack Windows Users via FakeNarrator Malware to Implant PcShare Backdoor

Chinese APT hackers launching a FakeNarrator malware to attack technology companies using windows computers and implant modified version of open-source PcShare backdoor.

gbhackers.com

How did they start the chain though/deliver the exploit ?, ie something must have started the chain which exploited the NVIDIA card software

 

[upnorth]

How did they start the chain though/deliver the exploit ?, ie something must have started the chain which exploited the NVIDIA card software

Attackers exploit the vulnerability when ShadowPlay, NvContainer, or GameStream is enabled with NVIDIA GeForce Experience.

NVIDIA Security Updates Fixes Critical Vulnerabilities that Allows Hackers Escalate Privileges and Perform DoS Attacks

NVIDIA released security updates that fix vulnerabilities with NVIDIA GeForce Experience. Attackers can exploit this vulnerability to escalate privileges, cause the denial of service attacks and code execution. This vulnerability can be tracked as CVE‑2019‑5674 and it receives the base score of...

gbhackers.com

NVIDIA Arbitrary File Writes to Command Execution | CVE-2019-5674 - Rhino Security Labs

A walkthrough of exploiting NVIDIA GeForce Experience through arbitrary file overwrites, CVE-2019-5674.

rhinosecuritylabs.com