Trojanized Installers Used to Distribute Bumblebee Malware
21-Apr-23
To spread the Bumblebee malware, popular software products like Zoom, Cisco AnyConnect, ChatGPT, and Citrix Workspace have been trojanized. In a report released on Thursday, Secureworks’ Counter Threat Unit (CTU) analysed the data and concluded that the infection chain for a number of these assaults depended on a deceptive Google Ad that sent consumers to a false download page via a compromised WordPress site.
According to Mike McLellan, intelligence director at SecureWorks CTU, “Google is the place to go to find it as people look for new tech or want to get involved with the hype around new tech like ChatGPT.” “Even for someone with deep technical knowledge, malicious ads returned in search results are incredibly difficult to spot.”
