Security News > 2023 > September > ZenRAT Malware Targets Windows Users Via Fake Bitwarden Password Manager Installation Package
Windows operating systems are the target of new malware dubbed ZenRAT by U.S.-based cybersecurity company Proofpoint.
The attackers built a website that impersonates the popular Bitwarden password manager; if accessed via Windows, the fake site delivers the ZenRAT malware disguised as Bitwarden software.
The malware ensures it doesn't already run on the system by checking for a specific mutex and that the hard drive isn't less than 95GB in size, which might indicate a sandbox system to the malware.
ZenRAT pretends to be a Bitwarden password manager package.
Figure A. If accessed via a Windows operating system, the fake website delivers the ZenRAT malware disguised as Bitwarden software.
Proofpoint indicated it's not known how the malware is being distributed; however, links to the fake Bitwarden website are probably sent to targets via email, social networks, instant messaging, via fake ads or SEO poisoning.
News URL
https://www.techrepublic.com/article/zenrat-malware-targets-windows-users/
Related news
- Hackers abuse Windows SmartScreen flaw to drop DarkGate malware (source)
- Hackers exploit Windows SmartScreen flaw to drop DarkGate malware (source)
- New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics (source)
- Detecting Windows-based Malware Through Better Visibility (source)
- 6 Best Open Source Password Managers for Windows in 2024 (source)
- Microsoft fixes two Windows zero-days exploited in malware attacks (source)
- Russia's APT28 Exploited Windows Print Spooler Flaw to Deploy 'GooseEgg' Malware (source)