Tag: RVTools

RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer

20May

By RBNo Comments

News

RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer

An infected installer for the well-known VMware environment reporting tool has been made available on the official RVTools website. RVTools.com and Robware.net are not operational at the moment. In a statement published on its website, the business wrote, "We appreciate your patience and are working quickly to restore service." The only approved and supported websites for RVTools software are Robware.net and RVTools.com. Avoid using any other websites or sources to look for or download alleged RVTools software. The development follows security researcher Aidan Leon's disclosure that a malicious DLL—which turned out to be Bumblebee, a known malware loader—was being sideloaded via an infected version of the installer that was downloaded from the website read more about RVTools Offi...

Kickidler employee monitoring software abused in ransomware attacks

9May

By RBNo Comments

News

Kickidler employee monitoring software abused in ransomware attacks

Legitimate Kickidler employee monitoring software is being used by ransomware operations for reconnaissance, activity tracking, and credential harvesting following network breaches. Qilin and Hunters International ransomware affiliates installed Kickidler, an employee monitoring application that can record keystrokes, take screenshots, and record screen movies, during attacks seen by cybersecurity firms Varonis and Synacktiv. According to Kickidler's developer, the application offers visual monitoring and data loss protection tools and is utilized by more than 5,000 enterprises across 60 countries. When customers searched for RVTools, a free Windows tool for managing VMware vSphere deployments, the threat actors first removed the Google Ads that appeared. When the advertisement w...