Beware; Adwind RAT infecting Windows, OS X, Linux and Android Devices

The java-based cross-platform Adwind RAT not only steals data but also turns the infected device into a botnet!

Cyber criminals always develop malware filled with unbelievable features but hardly ever you will find something that targets different operating systems simultaneously. Now, researchers have discovered a malware based on Java infecting companies in Denmark but it’s only a matter of time before it will probably hit other countries.

Read More: Cover Your Cams: Webcam of This Couple Got Hacked with RAT While Watching Netflix

Dubbed Adwind RAT (Remote access tool), the malware was first detected and taken down in 2015 before it could infect millions of users around the world, however, it’s back with full power as currently, no anti-virus software could detect.  If your device is infected with this malware, your security software is rendered useless against it (at least for now).

beware-adwind-rat-targeting-windows-os-x-linux-android-devices-2
Detection test on VirusTotal

In a blog post, Andra Zaharia of Heimdal Security revealed that cybercriminals are sending malicious emails to organizations in the English language attached with Doc-172394856.jar file which open executions providing a backdoor access to attackers. The researchers have warned not to download or click any files coming with a Java archive .jar extension.

The targeted devices include Windows, OS X, Linux and Android which upon infection turn them into a botnet, that’s not all, Adwind also steals data from the device. Previously, Omni RAT was found targeting Mac, Linux, Windows PC and Android phones. 

In 2016, researchers have identified several cases in which Javascript malware was used to infect users; i.e Comment tagging malware on Facebook dropping malware on Chrome users, Qarallax RAT or QRAT on Skype and even the famous SNAP vulnerability in Android devices was also triggered through javascript malware.

Must Read: Alert Gamers: RAT Activity Identified in Steam Stealer Malware Scam

There’s much more on Heimdal Security website including additional technical details.

To protect your devices from such malicious software don’t download files from unknown emails, don’t download files from untrusted websites.

Heimdal Security

Related Posts