New Stealthy Bandit Stealer Targeting Web Browsers and Cryptocurrency Wallets

[silversurfer]

Content source

https://thehackernews.com/2023/05/new-stealthy-bandit-stealer-targeting.html

A new stealthy information stealer malware called Bandit Stealer has caught the attention of cybersecurity researchers for its ability to target numerous web browsers and cryptocurrency wallets.

"It has the potential to expand to other platforms as Bandit Stealer was developed using the Go programming language, possibly allowing cross-platform compatibility," Trend Micro said in a Friday report.

The malware is currently focused on targeting Windows by using a legitimate command-line tool called runas.exe that allows users to run programs as another user with different permissions.

The goal is to escalate privileges and execute itself with administrative access, thereby effectively bypassing security measures to harvest wide swathes of data.

 

[Brahman]

Its high time that windows should in default restrict the admin rights and enable it only after asking for login password to be entered manually, like in Linux. This would at-lest make an unsuspecting user aware of something is requesting admin rights and that is to be suspected off.

 

[Zero Knowledge]

Its high time that windows should in default restrict the admin rights and enable it only after asking for login password to be entered manually

Never going to happen. Useability trumps security in Windows. What will happen is MFA/2FA with security keys for accounts. That's the way forward.

+ There are plenty of priv esc bugs/exploits out there making elevating to admin easy. So standard/restricted accounts are not the answer.