SilentCryptoMiner Infects 2000 Russian Users via Fake VPN and DPI Bypass Tools
A cryptocurrency miner called SilentCryptoMiner is infecting people as part of a new widespread malware operation that poses as a tool for getting around internet blocks and restrictions on online services.
The action, according to Russian cybersecurity firm Kaspersky, is a part of a broader pattern in which hackers are using Windows Packet Divert (WPD) tools more frequently to disseminate malware masquerading as restriction-bypassing software.
Researchers Leonid Bezvershenko, Dmitry Pikush, and Oleg Kupreev noted that such malware is frequently distributed as archives with text installation instructions. In these instructions, the developers advise turning off security solutions due to false positives. Attackers benefit from this since it gives them the opportunity to continue oper...