The “URGENT REQUEST FOR PRICE OFFER” and “Ürün 56787898 için sipariş” email attachments contain an exe: the malware. Data is stolen via SMTP and Telegram API.
Cybercrime, SnakeKeylogger passes by invoices in Turkey
SnakeKeylogger passes by invoices in Turkey. The “854F1E97-5DBB-4A87-A566-33D9012B05E2pdf.lzh” attachment of the “MEPAS E-Arsiv Fatura” email contains an exe: the malware. Stolen data is exfiltrated via Telegram API
New invoice themed SnakeKeylogger campaign from Turkey.
The “854F1E97-5DBB-4A87-A566-33D9012B05E2pdf.lzh” attachment of the “MEPAS E-Arsiv Fatura” email contains an exe file: the malware. The stolen data is then exfiltrated via Telegram API.
Indeed, SnakeKeylogger is an info-stealer capable of acquiring information through various methods.
Related Posts
