They violated the travel visa issuance process at a consulate in Belarus
ESET researchers discovered a piece of malicious code called Malware Agent.PYO that has been attacking the Polish diplomatic mission in Belarus in recent weeks.
Cybercriminals managed to create a botnet that automatically fills out visa applications at a Polish consulate in Belarus. In addition, the botnet connected about a thousand computers to a network.
“We understand that scheduling a visa appointment is often difficult, so a special online process has been created to confirm the appointment,” explains ESET Sebastien Duquette, adding: “Some resorted to writing scripts to automate the process, and apparently someone decided to go one step further, creating a botnet specifically for filling out applications.”
The malware infiltrated the system, and four days before the registration process began, its downloader spread to computers in Belarus. The result was that more than 200,000 computers were redirected to the exploit kit in about six days. Within five weeks, 925 different computers were connected to the botnet.
Source: protothema.gr
