Microsoft has alerted a Trojan who acts from Chrome in Windows with the aim of collecting information about the infected equipment and stealing cryptocurrencies and access credentials stored in the Google browser.
Stilachirat is a remote access Trojan that Microsoft Incident Response researchers detected in November last year and that, despite the follow -up, they have not yet managed to attribute to any specific actor or geolocation.
The company stands out from Stilachirat Its stealth capabilities and the use of various methods to steal information from the target systemand warns that it can end up installed in the “through various vectors” equipment, such as ‘software’ tools or updates that pretend to be legitimate or come from unofficial or reliable sources.
Your goal is The theft of information from the infected Windows team, As Microsoft explains in his official blog. From the Chrome browser collects system information (operating system, active remote desktop protocol and user graphic interface applications in execution), of the digital wallet, of the saved credentials and the clipboard.
The connection with a remote server Allows the execution of remote commandsfor example, to execute the theft of information and extract it from the equipment, as well as to eliminate the records that betray its presence, and to make a lateral movement by the system.
Microsoft recommends using Edge instead of Chrome to avoid Stilachirat’s threat, and use their own security tools, which are able to detect this Trojan.
#careful #Google #Microsoft #alerts #Trojan #steals #information #passwords
