The popular media editing site VSDC has been targeted by hackers, who are using it to distribute a Banking Trojan and steal user information. If you downloaded the program between late February and late March, then it is very likely that your computer has been infected.
Today, The Hacker News published a report by Dr. Web, according to which hackers took over the VSDC website and replaced the software download links to lead to malicious versions of the software, putting the site's more than one million users at risk of infection with the Win32.Bolik.2 banking trojan and KPOT stealer.
The paradox of the case, however, is that even though the website is so popular, it operates and offers software downloads over an insecure HTTP connection.
The hackers' motives behind the attack are still unknown, but it seems that they are not targeting all users without exception. Dr.Web researchers found a malicious JavaScript code on the VSDC website, designed to check the visitor's geographical location and replace download links only for visitors from the UK, the US, Canada and Australia.
What to do if you are infected
Simply installing the regular software update will not remove the malware code from an infected system.
Therefore, if you downloaded the software during this period, you should immediately install antivirus software, with the latest updates, and scan your system for malware.
Besides, affected users are advised to change passwords for important social media sites and banking accounts after cleaning the systems or from a different device.
