SlippyNunchucks hijacks Sogou Input Method brand promotion to spread malware
MALWAREESETredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
ESET Research has analysed a DNS hijacking operation, dubbed SlippyNunchucks, that abuses the brand promotion mechanism of the Windows version of Sogou Input Method to distribute malware. The attack exploits insecure HTTP communications in the software, which allow traffic to be redirected.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether Sogou Input Method is installed on Windows devices.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
ESET WeLiveSecurity
Who and what is in it
Threat actors
Companies
Products