📬 Rilide-Malware befällt Chromium-Browser und stiehlt Krypto-Coins
#Krypto #Malware #2FA #AuroraStealer #Brave #Chromium #EkipaRAT #GoogleAds #googlechrome #GoogleDrive #KryptoWallet #Kryptowährungen #MaaS #MicrosoftEdge #Opera #Rilide #Trustwave #Vivaldi https://tarnkappe.info/artikel/krypto/rilide-malware-befaellt-chromium-browser-und-stiehlt-krypto-coins-272435.html
#vivaldi #trustwave #rilide #opera #microsoftedge #maas #kryptowahrungen #kryptowallet #googledrive #googlechrome #googleads #ekiparat #chromium #brave #aurorastealer #2fa #malware #krypto
Malvertising campaign on Google Search, targeting Nvidia. But the malware page is actually Java-themed 🤔 Spreading #AuroraStealer
Payload domains:
🔥 nvidia .services
🔥 nvidia1 .top
Payload URL:
🌐 https://urlhaus.abuse.ch/url/2540641/
Payload:
📄 https://bazaar.abuse.ch/sample/1136c9de55d2b906975ee695b073bb214e464f619d3ec0c4d2629ebd75a73485/
AuroraBotnet C2:
📣 https://threatfox.abuse.ch/ioc/1069795/
ISC diary: @malware_traffic finds Google Ad --> fake Notepad++ page --> #AuroraStealer https://i5c.us/d29448