Malware · 1 source · latest 1h

Fake software downloads secretly enlist Windows PCs in bandwidth sharing and computing schemes

MALWAREMicrosoftredteam/daily · 1 source

Severity: Medium
Sources: 1

What happened

Microsoft researchers documented a campaign where fake installers for cracked software, games and plugins drop multiple payloads in one session. The branches install WorldProxyPool proxyware, CharityEngine and BOINC computing components, and Advanced Windows Manager utilities, with WorldProxyPool creating SYSTEM-level scheduled tasks for persistence.

For IT people · Written by AI from 1 source · Wrong?

What to do

Avoid cracked software and unofficial download sources.
Review computers for unexpected scheduled tasks, especially those running as SYSTEM, such as WorldProxyPoolAgent, WorldProxyPoolWatchdog and WorldProxyPoolUpdater.
Enable potentially unwanted application protection and keep cloud-delivered antivirus, tamper protection and reputation-based checks active.
Investigate software that users did not intentionally install and check the listed indicators of compromise.

Written by AI from the sources, checked against them

Read the full story at the source