Brazilian hackers may be behind attacks with ‘invisible’ malware

Hackers They are using advanced techniques to access computer memory without being detected by antivirus systems. The warning is from Acronis, a global technology company specializing in cyber security.

In addition, criminals have adopted evasion tactics to hide their tracks in a new campaign of cyber attacks considered highly sophisticated. According to experts, Brazilian hackers may be behind these cases.

Malware excerpts are written in Portuguese

• Although the attacks are more concentrated in Colombia, Acronis experts have found excerpts from the malicious code written in Portuguese.
• This may indicate involvement of Brazilian hackers or even a preparation for cybership in Brazil and other Portuguese -speaking countries.
• According to the company, the campaign, called Shadow Vector, poses a real risk to both individuals and organizations in Latin America.
• This is because victims can be theft of credentials, monitoring of activities and total commitment of their systems.
• In addition, experts warn that the campaign can easily be adapted to reach users in other regions of the planet.

read more

Attacks were classified as high threat

Hackers take advantage of SVG (Scalable Vector Graphics) files and use phishing emails, false messages that are true to imitate official court notifications, increasing the chances of the victim clicking on the files. When this happens, malware can invade the computer without being perceived by security systems.

To host these malicious files, criminals use public platforms such as Bitbucket and Archive.org, legitimate websites for code storage and files. These addresses are often reliable, which makes it difficult to identify the attack.

Classified as high threat, the campaign distributes remote access trojans such as Asyncrat and Remcost, which allow full machine control, credential theft and active surveillance. Acronis registered more than 170 payloads downloads in just a few hours after the first sample was charged, indicating active exploration and real -time spread.