WorldProxyPool
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Malware reported by Cyber Security NewsFake software downloads secretly enlist Windows PCs in bandwidth sharing and computing schemes
- Malware reported by GBHackersFake game and cracked software downloads turn Windows PCs into revenue sources
- Malware reported by Microsoft Security BlogFake download campaign uses trojanised installers to push monetisation software
Recent news
Fake software downloads secretly enlist Windows PCs in bandwidth sharing and computing schemes
Microsoft researchers documented a campaign where fake installers for cracked software, games and plugins drop multiple payloads in one session. The branches install WorldProxyPool proxyware, CharityEngine and BOINC computing components, and Advanced Windows Manager utilities, with WorldProxyPool creating SYSTEM-level scheduled tasks for persistence.
Fake game and cracked software downloads turn Windows PCs into revenue sources
A fake-download campaign uses trojanised installers disguised as games, cracked software and utilities to monetise Windows machines. A single installation can deliver several third-party software offers, which use the victim's bandwidth and computing resources. Microsoft's November 3 investigation confirmed three branches, including WorldProxyPool proxyware and CharityEngine.
Fake download campaign uses trojanised installers to push monetisation software
Microsoft Threat Intelligence has tracked a campaign that uses trojanised Inno Setup-style installers, distributed as fake downloads for cracked software, games, activators and utilities. A single installation can silently deploy several monetisation payloads, including proxy-network software, compute-sharing software and adware-style utilities. WorldProxyPool also creates recurring SYSTEM scheduled tasks for persistence.