Users of desktop computers and laptops may want to think twice before downloading and installing a supposed PC version of the popular mobile app WhatsApp.
Security vendor Kaspersky Labs said, emails spreading online claim WhatsApp for PC is available and that the recipient already has 11 invitations from friends in his account.
"If the victim clicks on the link, it will lead him/her to a hacked server in Turkey and will then be redirected to a Hightail (Yousendit) account to download the initial Trojan, which in the system looks like a 64-bit installation file," Kaspersky researcher Dmitry Bestuzhev said in a blog post.
But the malware in reality will download a new Trojan that targets banking data.
According to Bestuzhev, the malware comes from a server in Brazil, with the recently downloaded banker having the icon of an mp3 file.
The malware also has some anti-debugging features to make analysis harder.
"Once running, the malware reports itself to the cybercriminals’ infections statistics console and when open, a local port 1157 sends stolen information in the Oracle DB format. In addition, it downloads new malware into the system; some samples are 10Mb in size. This is the classic style of a Brazilian-created malware," Bestuzhev said. — KDM, GMA News
source: gmanetwork.com
