216.73.216.236

Distribution of Infostealer Made With Electron

· Published 30/04/2024 14:52 · Modified 01/05/2024 23:09

Export JSON

Essential information

Published
30/04/2024 14:52
Modified
01/05/2024 23:09
Tags
electron infostealer javascript node.js
Related entities
1 observables, 5 techniques (mitre)

Description

AhnLab Security Intelligence Center (ASEC) has discovered an malware strain developed using the framework, which allows the creation of applications using , HTML, and CSS. The malware is distributed through Nullsoft Scriptable Install System (NSIS) installer format. Once executed, it installs an application that interacts with the operating system via , where the malicious behaviors are defined. The report describes two cases, one involving user information collection and the other uploading collected data to a file-sharing service. The malware strains are difficult to detect due to their structure.

External references