Beware of free plug

Do you like e-books? Free ones? They’re easy to find: e-books are often uploaded to public servers such as rapdishare, megaupload and others. Anyone who finds the link can download books from such websites for free.

Is is safe? Well – judge for yourself. Just the other day I found a browser plug-in on BitRoad dot net that people can download and use as a tool to download e-books. The plug-in is browser independent and attacks both IE and Firefox.

And yes…it was malware – AdWare.Win32.Kitsune.f. I checked for detection on Virus Total and the results were not great – 9/32 (26.13%).

And this is just one incident. In reality, this occurs every day. Plug-ins on any open freeware website can be malicious – there are no guarantees and obligations, after all. So…stay safe and surf cautiously. As ever.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.