Fake Zenmap. WinMRT sites target IT staff with Bumblebee malware
More typosquatting sites are being utilized by the Bumblebee malware SEO poisoning operation, which was discovered earlier this week and impersonates RVTools, to infect IT staff devices by imitating other well-known open-source projects.
Using the popularity of Zenmap, the GUI for the Nmap network scanning tool, and the WinMTR tracerout software, BleepingComputer was able to identify two cases.
IT professionals frequently utilize these two programs to diagnose or analyze network traffic; however, some of their functions require administrative access. Because of this, threat actors target users of these technologies in an attempt to compromise corporate networks and propagate laterally to additional devices.
Zenmap[.]pro and winmtr[.]org are the two domains through which the Bumbl...