StrongPity: A new malware when you download WinRAR or TrueCrypt read more at here www.spinonews.com/index.php/item/1238-strongpity-a-new-malware-when-you-download-winrar-or-truecrypt

Security firm Kaspersky Lab revealed a new malware called StrongPity has been found in installers for two specific tools WinRAR and TrueCrypt. The malware executes itself once the user installs it on their computer.

The Malware poses a legitimate installer by manipulating the domain name. This allows it to get linked to the sites that distribute WinRAR and TrueCrypt installer file. Once the user clicks on the download link, it drops a malware file. Once it’s installed, the Malware takes control of the entire system.

According to Kaspersky Lab, the malware StrongPity attacks mainly in Italy and Belgium, but the malware has also hit people located in Turkey, North Africa, and the Middle East.

Kaspersky Lab has revealed that the security firm witnessed an Italian WinRAR distribution site directly handing out the fake WinRAR installer instead of linking to an impostor site. The good news here is that all affected WinRAR distribution sites have removed.

However, the malware attacking its victims through TrueCrypt installers. The tool is still required to transfer the files from TrueCrypt to BitLocker format. Through the distributor’s site the malware has made its way to Turkey affecting a considerable number of users.

StrongPity has the ability to infiltrate victim’s hard disk and also steal their contact information. However, Kaspersky is on its way to remove the malware from the infected website and hopefully stop such infiltration.

Comments