Latest Vidar news

Fake IT support sites push malicious PowerShell scripts as Windows fixes

Fake IT support sites promote malicious PowerShell "fixes" for common Windows errors, like the 0x80070643 error, to infect devices with information-stealing malware.
- Lawrence Abrams
- June 30, 2024
- 10:21 AM
- 0
Online sellers targeted by new information-stealing malware campaign

Online sellers are targeted in a new campaign to push the Vidar information-stealing malware, allowing threat actors to steal credentials for more damaging attacks.
- Lawrence Abrams
- June 03, 2023
- 11:52 AM
- 1
Hackers push malware via Google search ads for VLC, 7-Zip, CCleaner

Hackers are setting up fake websites for popular free and open-source software to promote malicious downloads through advertisements in Google search results.
- Ionut Ilascu
- January 17, 2023
- 06:09 PM
- 7
Over 1,300 fake AnyDesk sites push Vidar info-stealing malware

A massive campaign using over 1,300 domains to impersonate the official AnyDesk site is underway, all redirecting to a Dropbox folder recently pushing the Vidar information-stealing malware.
- Bill Toulas
- January 10, 2023
- 06:05 PM
- 2
Typosquat campaign mimics 27 brands to push Windows, Android malware

A massive, malicious campaign is underway using over 200 typosquatting domains that impersonate twenty-seven brands to trick visitors into downloading various Windows and Android malware.
- Bill Toulas
- October 23, 2022
- 10:17 AM
- 1
Fake Pixelmon NFT site infects you with password-stealing malware

A fake Pixelmon NFT site entices fans with free tokens and collectibles while infecting them with malware that steals their cryptocurrency wallets.
- Lawrence Abrams
- May 15, 2022
- 12:34 PM
- 0
Vidar stealer abuses Mastodon to silently get C2 configuration

The Vidar stealer has returned in a new campaign that abuses the Mastodon social media network to get C2 configuration without raising alarms.
- Bill Toulas
- October 07, 2021
- 11:59 AM
- 0
Hackers Hijack Routers’ DNS to Spread Malicious COVID-19 Apps

A new cyber attack is hijacking router's DNS settings so that web browsers display alerts for a fake COVID-19 information app from the World Health Organization that is the Vidar information-stealing malware.
- Lawrence Abrams
- March 23, 2020
- 06:33 PM
- 6
Fake VPN Site Pushes CryptBot and Vidar Info-Stealing Trojans

A cyberthreat actor has created a web site that promotes a fake VPN program that installs the Vidar and CryptBot password-stealing trojans. These trojans will then attempt to steal saved browser credentials and other information from a victim's computer.
- Lawrence Abrams
- December 06, 2019
- 03:18 PM
- 4
Fake Cryptocurrency Trading Site Pushes Crypto Stealing Malware

Malware distributors have setup a site that impersonates the legitimate Cryptohopper cryptocurrency trading platform in order to distribute malware payloads such as information-stealing Trojans, miners, and clipboard hijackers.
- Lawrence Abrams
- June 05, 2019
- 12:57 PM
- 0