Name: Hackers abusing this perfectly innocent Windows 10 feature to infect machines
Brand: techradar.com
SKU: techradar-com-55
Availability: OnlineOnly

critic

Hackers abusing this perfectly innocent Windows 10 feature to infect machines

preview

TechRadar is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. .Audio player loading…The Windows Finger command that is used to display information about users on a remote machine is being abused by cyberattackers to infect devices with malware. It has been discovered that the command can be misused to download the MineBridge malware on an unsuspecting victim’s device.Bleeping Computer reports that security researcher Kirk Sayre identified a new phishing campaign using the Finger Command. The campaign involves the sending of a job resume from a supposed candidate.When a victim then clicks to enable editing on the document, a macro will run that uses the Finger Command to download a Base64 encoded certificate that is actually a malware executable. The downloader then uses DLL hijacking to sideload the MineBridge malware.The MineBridge malware was first identified by security researchers at a year ago, with the campaign initially targeting financial services firms in the US. Back then, a phishing campaign involving a fraudulent job application was also used.This is also not the first time that the Finger command has been repurposed to deliver malicious software to a victim’s device. Back in September, it was found that the Finger command could be used to bypass security controls in order to download malware remotely without triggering antivirus alerts. &nbsp;Given that the Finger command is rarely used, it might be a good idea for system administrators to block the command in order to prevent devices from becoming infected with the MineBridge malware strain.&nbsp;Given that phishing campaigns are becoming more popular as employees continue to work remotely, it is now even more essential that IT leaders put as many safeguards in place as they can.&nbsp;ViaSign up to theTechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!Thank you for signing up to TechRadar. You will receive a verification email shortly.There was a problem. Please refresh the page and try again.MOST POPULARMOST SHARED1234512345

TechRadar is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. .Audio player loading…The Windows Finger command that is used to display information about users on a remote machine is being abused by cyberattackers to infect devices with malware. It has been discovered that the command can be misused to download the MineBridge malware on an unsuspecting victim’s device.Bleeping Computer reports that security researcher Kirk Sayre identified a new phishing campaign using the Finger Command. The campaign involves the sending of a job...

public

Barclay Ballard

techradar.com

Credible

Speculation

Anecdotal Evidence

Generalization

Stacking the Deck

Appeal to Authority

Straw Man

Slippery Slope

Emotional Appeal

Red Herring

False Dilemma

Illogical

Moral Equivalency

Ad Hominem

Correlation w/o Causation

Semantics

Begging the Question

Faulty Analogy

Non Sequitur

Bandwagon

Dogmatism

Failing Occam's Razor

Biased

Pure Opinion

Hit Piece

Racial Bias

National Bias

Religious Bias

Financial Incentive

Political Agenda

Gender Bias

Misused Image/Video

Study Misinterpreted

Mistake

Misused Term

Science Misrepresented

Factual Error

Satire

Surface Level

Lack of Reliable Sources

Sensational

Not Credible

Investigative

Balanced

Well Sourced

Great Context

sports

entertainment

U.S.

international

business

technology

science

culture

politics

media

health

Hackers abusing this perfectly innocent Windows 10 feature to infect machines

No article scores yet.

CRITIC REVIEWS

PUBLIC REVIEWS