Legitimate Kickidler employee monitoring software is being used by ransomware operations for reconnaissance, activity tracking, and credential harvesting following network breaches.
Qilin and Hunters International ransomware affiliates installed Kickidler, an employee monitoring application that can record keystrokes, take screenshots, and record screen movies, during attacks seen by cybersecurity firms Varonis and Synacktiv.
According to Kickidler’s developer, the application offers visual monitoring and data loss protection tools and is utilized by more than 5,000 enterprises across 60 countries.
When customers searched for RVTools, a free Windows tool for managing VMware vSphere deployments, the threat actors first removed the Google Ads that appeared. When the advertisement was clicked, a phony RVTools website (rv-tool[.]net) marketing a trojanized version of the program read more about Education giant Pearson hit by cyberattack exposing customer data.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.