If you’ve ever stored credit card details in your browser (like, by saying, ‘Yes’ to one of those prompts which pops up when you’re buying stuff), be on your guard.
A new strain of malware can snaffle up credit card data and passwords stored in Chrome and Firefox – which could hand hackers the keys to your whole online life.
The Vega Stealer malware infects PCs and is currently circulating in an email which seems to be targeting advertising and marketing pros.
Discoverer Proofpoint warns that it ‘may continue to evolve and grow to be a commonly observed threat’.
The message is circulating as a document ‘Brief.doc’ – but clicking on a button saying, ‘Enable editing’ actually downloads malware, Fox News reports.
The current campaign is relatively small-scale, Proofpoint says – but this could merely be a ‘first stage’ for the attackers.
Proofpoint said, ‘Corporate credential theft often allows threat actors to establish a beachhead for further penetration into corporate networks and systems.’
‘While Vega Stealer is not the most complex or stealthy malware in circulation today, it demonstrates the flexibility of malware, authors, and actors to achieve criminal objectives.
‘Because the delivery mechanism is similar to more widely distributed and mature threats, Vega Stealer has the potential to evolve into a commonly found stealer. We will continue to monitor this threat as it propagates in the wild.’
Share this with