Fortinet researchers have discovered a new and highly sophisticated variant of the Snake Keylogger malware.
The malware, which first appeared in November 2020, is designed to record keystrokes and steal sensitive user, including credentials, browser information, and clipboard activity.
The new variant of Snake malware is targeting users around the world, but more infections have been reported in China, Turkey, Indonesia, Taiwan, and Spain.
See also: Malicious code in images distributes VIP Keylogger & 0bj3ctivity malware
How does Snake Keylogger malware work?
According to Fortinet researchers, the attack involves three main phases:
Distribution and Spread: Malware is distributed through phishing emails, which contain malicious links or attachments.
Data collection: Snake malware records keystrokes and extracts credentials from popular browsers like Chrome and Firefox.
Data transmission: The malware sends stolen information to command and control servers via encrypted channels such as SMTP (email) and Telegram bots.
Researchers also observed advanced techniques to avoid detection, including process hollowing (injecting malicious code into legitimate Windows processes) and persistence mechanisms, such as scripts that install themselves in the Windows startup folder.
Snake Keylogger malware: A major threat
What makes keyloggers particularly dangerous is their use of obfuscation tools, such as AutoIt scripting, to bypass antivirus tools . The scripting language allows attackers to hide malicious payloads within seemingly benign files, complicating analysis and detection.
See also: VIPKeyLogger: Steals credentials via dangerous Office files
Snake Keylogger also actively targets credentials stored in the browser, leveraging hooks and APIs to access login data, autofill data, and even credit card information.
Keylogger protection
One of the main protection measures to avoid keylogger attacks is to install up-to-date and reliable antivirus software. A good antivirus program can detect and prevent keyloggers from being installed on your computer.
Another important protection measure is to avoid clicking on suspicious links and opening unexpected emails or attachments. Snake malware is distributed via phishing emails.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Also, strengthen password security . Use a unique and complex password for each account you have. Avoid using easy passwords like your birthday or your pet's name. Also, change your passwords regularly and use different passwords for each account.
See also: Nova Keylogger steals credentials and captures screenshots
It's also essential to keep operating system and applicationsto date. Software companies often release updates and patches to address known security issues. It's important to install these updates when they're available, as they can include improvements to your system's security.
Finally, use a firewall to protect your computer from incoming connections. A firewall can prevent malware, including keyloggers, from entering your computer. Choose a firewall that offers advanced network traffic filtering and monitoring features.
Source: www.infosecurity-magazine.com
