The new adware, dubbed Adrozek, is being distributed by large, well organized threat actors, according to Microsoft research.
Microsoft has issued a warning about Adrozek, a new strain of browser modifier that, according to the company, "adds browser extensions, modifies a specific DLL per target browser, and changes browser settings to insert additional, unauthorized ads into web pages."
According to Microsoft, the malware is being distributed by large, well-funded, and organized groups. In the blog post warning about Adrozek, Microsoft researchers say that in their tracking of the Adrozek campaign from May to September, they found 159 unique domains used in attacks. While many of those domains hosted tens of thousands of URLs, they say that a few had more than 100,000 unique URLs, with one hosting almost 250,000.
They found hundreds of thousands of unique, heavily obfuscated, Adrozek installers. Once installed, the malware makes changes to several browser extensions and .DLLs. Both Firefox and Chromium-based browsers are susceptible to Adrozek. Researchers recommend a number of practices, including limiting available URLs and restricting software that can be installed, as methods that can help limit the impact of Adrozek and similar malware.
For more, read here.
About the Author(s)
You May Also Like
Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024Safeguarding Political Campaigns: Defending Against Mass Phishing Attacks
May 16, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024