Security News > 2023 > June > Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data

A previously undocumented Windows-based information stealer called ThirdEye has been discovered in the wild with capabilities to harvest sensitive data from infected hosts.

The arrival vector for the malware is presently unknown, although the nature of the lure points to it being used in a phishing campaign.

The evolving stealer, like other malware families of its kind, is equipped to gather system metadata, including BIOS release date and vendor, total/free disk space on the C drive, currently running processes, register usernames, and volume information.

A notable trait of the malware is that it uses the string "3rd eye" to beacon its presence to the C2 server.

"While this malware is not considered sophisticated, it's designed to steal various information from compromised machines that can be used as stepping-stones for future attacks," Fortinet researchers said, adding the collected data is "Valuable for understanding and narrowing down potential targets."

"The addition of SeroXen and BatCloak to the malware arsenal of malicious actors highlights the evolution of FUD obfuscators with a low barrier to entry. The almost-amateur approach of using social media for aggressive promotion, considering how it can be easily traced, makes these developers seem like novices by advanced threat actors' standards."

News URL

https://thehackernews.com/2023/06/newly-uncovered-thirdeye-windows-based.html