New PseudoManuscrypt Malware Infected Over 35,000 Computers in 2021

[silversurfer]

Content source

https://thehackernews.com/2021/12/new-pseudomanuscrypt-malware-infected.html

Industrial and government organizations, including enterprises in the military-industrial complex and research laboratories, are the targets of a new malware botnet dubbed PseudoManyscrypt that has infected roughly 35,000 Windows computers this year alone.

The name comes from its similarities to the Manuscrypt malware, which is part of the Lazarus APT group's attack toolset, Kaspersky researchers said, characterizing the operation as a "mass-scale spyware attack campaign." The Russian cybersecurity company said it first detected the series of intrusions in June 2021.

At least 7.2% of all computers attacked by the malware are part of industrial control systems (ICS) used by organizations in engineering, building automation, energy, manufacturing, construction, utilities, and water management sectors that are located mainly in India, Vietnam, and Russia. Approximately a third (29.4%) of non-ICS computers are situated in Russia (10.1%), India (10%), and Brazil (9.3%).

"The PseudoManuscrypt loader makes its way onto user systems via a MaaS platform that distributes malware in pirated software installer archives," the Kaspersky ICS CERT team said. "One specific case of the PseudoManuscrypt downloader's distribution is its installation via the Glupteba botnet."

New PseudoManuscrypt Malware Infected Over 35,000 Computers in 2021

More than 35,000 computers were infected by PseudoManuscrypt malware in 2021

thehackernews.com

 

[Andy Ful]

I think that this attack vector (pirated software) is the most successful attack vector also against home users. The users are highly motivated to install the software even when they suspect it to be malicious. They are guided by friends or some forum members.
In this way, the malware has great chances to spread out, especially when it is of a spying type. The malware takes control over computers in a silent way so inexperienced users do not see any clear signs of infection for a long time.
I think that some users even do not care if their computer is infected in this way if they can use for free their beloved game or program.