4 ms·
The article doesn't explain what exactly the "W4SP Stealer" does. Would someone be able to explain?
by sc__ 4y ago
The article doesn't explain what exactly the "W4SP Stealer" does. Would someone be able to explain?
- banana_giraffe 4y agoIt downloads a script that, at least right now, will turn around and grab cookies and passwords from browsers and send the data off to an discord webhook.
- avian 4y ago> discord webhook Hah. Is this true? I find it funny since IRC has/had this reputation for being a means of communication with malware and it's often blocked on this grounds. Nice to know that malware is going on with the times and is using Discord for that now.
- neurostimulant 4y agoDiscord is great as command and control server because the malware author doesn't need to expose their ip address or implement a complex web of proxy to secure their C&C server.
- remram 4y agoCouldn't you use someone else's IRC server, the same way you use Discord's server?
- neurostimulant 4y agoI suppose you could, but have you seen how popular new opensource projets being run these days? Young devs really loves discord to the point of hosting documentations there. I imagine young malware authors are no different.
- louislang 4y agoIt's a slew of checks for passwords and other things on the developers machine. The data is extracted and sent to a remote endpoint controlled by the attacker.
- n4bz0r 4y agoThe source is actually hosted on GitHub, and there is a good readme explaining all that :) https://github.com/loTus04/W4SP-Stealer https://github.com/loTus04/W4SP-Stealer
- panny 4y agoIf I hosted malware, I would be in jail. It is against the law. I wonder why Github is allowed to host malware, and continues to provide a platform for it? https://sanctiontrace.com/malware-hosting-providers-sentenced-in-u-s-court/ https://sanctiontrace.com/malware-hosting-providers-sentence...