Trojanized installers turn Windows PCs into proxy profit centers
Original title: Fake software installers are turning your PCs into profit centers for hackers
Fake cracked software installers deploy WorldProxyPool for proxyware and distributed computing tools to monetize victims.
Microsoft observed a campaign using fake download pages and Inno Setup-style installers to deliver multiple monetization packages. Branches install proxyware CharityEngine BOINC and utility software. The campaign uses rotating infrastructure with HTTP callbacks.
- Distributes WorldProxyPool for third-party traffic routing
- Creates SYSTEM-level scheduled tasks
- Installs VirtualBox and Advanced Windows Manager
- Targets cracked software games and plugins
Impact: proxy usage and unauthorized distributed computing
- 1.prevent untrusted software downloads
- 2.enable potentially unwanted application protection
- 3.monitor for Inno temporary directories
From the original article
2 min read at csoonline.com
Users looking for cracked commercial software, free games, plugins, and unofficial utilities could be signing up for more than a free download. Microsoft has observed an evolving campaign that uses trojanized installers to turn the downloading Windows devices into money-making machines, consuming their computing resources and internet bandwidth without informed consent.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.