Security researchers have identified an advanced variant of the police-sponsored Reveton Ransomware, which carries the ability to steal credentials, through the integration of the latest version of the Pony malware.
Pony is designed as a malware dropper and has the ability to steal confidential information and passwords, as well as digital wallets. It should be noted that Pony has been used in numerous campaigns to create botnets.
According to Avast security researchers, the latest version of Reveton is no longer limited to locking the computer until the user pays the requested amount of money, but can also steal up to five digital wallet passwords.
Furthermore, the researchers point out that "by incorporating the Pony component, Reventon affects more than 110 applications, and turns your computer into a botnet member.".
Reventon has now become much more powerful, as Pony has the ability to decrypt complex passwords, stored in various formats.
The analysis of the new Reveton shows that there are 17 main modules targeted for password theft (e.g. operating systems, FTP clients, browsers, email clients, IM clients, online poker clients, RDP/VPN clients, etc.), as well as more than 140 sub-modules.
