SlippyNunchucks hijacks Sogou Input Method brand promotion to spread malware
MALWAREESETredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
ESET Research reports that SlippyNunchucks performs DNS hijacking against the Windows version of Sogou Input Method, abusing its brand promotion mechanism to distribute malware. The operation exploits insecure HTTP communications in the application. The article does not give affected versions, CVE identifiers or indicators of compromise. Defenders should identify Windows hosts with Sogou Input Method installed and review its network traffic for unexpected redirects.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether Sogou Input Method is installed on Windows devices.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
ESET WeLiveSecurity
Who and what is in it
Threat actors
Companies
Products