OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection
An open-source rootkit known as r77 has been distributed by a new malware campaign that uses social engineering techniques.
Threat actors can create persistence and avoid detection on hacked systems thanks to the activity, which Securonix has called OBSCURE#BAT. The campaign's sponsor is presently unknown.
According to a study released to The Hacker News, security experts Den Iuzvyk and Tim Peck stated that the rootkit "has the ability to cloak or mask any file, registry key, or task beginning with a specific prefix." Users have been the target of social engineering schemes that either pose as genuine software downloads or utilize phony captchas.
English-speaking people, especially those in the US, Canada, Germany, and the UK, are the campaign's primary target audience read more ...