The new malware distribution model is in a monthly subscription, with which they take over your personal data. Hackers have found a gold mine in this subscription model.
A new malware is being distributed among hacker communities, who pay up to $ 200 a month to use it. Known as Racoon Infostealer, this malicious software of Russian origin is capable of stealing financial information from users, such as credit cards, cryptocurrency wallets and passwords from the browser or email clients.
According to the computer security company, Cyberreason, Racoon has been distributing since April 2019 and it is presumed that it has infected hundreds of thousands of computers, where it performs a search of the files with confidential information and then sends it to the attacker.
The grace of Racoon is that it is offered in hacking forums for a monthly fee of $ 200. With an announcement that lists its advantages, the development team offers malware with the promise of optimizing the time of those interested in extracting financial information from their victims.
The Racoon Software is distributed through an exploit where the user is redirected to a page that executes malicious code. Also in email through phishing or with legitimate software that is downloaded from sites of doubtful origin.
Once the computer is infected, Racoon is installed in memory and connected to a C2 server. The malware starts storing users' private information in various ways, from accessing operating system folders to making screenshots that will be sent to the attacker.
The software also accesses passwords stored in browsers such as Chrome, Firefox, Opera, Vivaldi and more, as well as accounts registered in Microsoft Outlook. Finally, Racoon also performs a search for installed cryptocurrency wallets and steals the information.
This malware has infected more than 100,000 computers worldwide since April 2019, the month it began to be distributed in forums.
The reception of Racoon by its users has been positive, both in the operation and in the support provided by the development team, who assure that they are working on options to make it more robust.
Hackers are generating a new trend, where they seek to develop tools to be third parties and not they who commit the illicit.
