Malware can be easily created and delivered as a payload through various means to the targeted victims. Delivery means includes compromised flash drives, untrusted programs /applications and more easily through web browsers code injection.
Malware delivered through a compromised website on chrome browsers can bypass User Account Controls to infect systems and steal sensitive data, session cookies, saved login passwords and other sensitive cached files. Cyber actors exploiting this newly identified malware operation are targeting Windows 10 with malware that can infect the systems via a technique that cleverly bypasses Windows cybersecurity protections called User Account Control (UAC).
Rapid7 researchers recently identified the loophole and warn that the goal of the attackers is to extricate sensitive data and steal sensitive credentials from the infected victim’s PC.
According to the research analyst, it is possible that this form of malware attack can maintain the persistence on PC by overriding Windows 10 registry settings and initiate scheduled task at the background to ensure it persistently executes the malware with elevated privileges.
Chrome browser malware delivery sequence is initiated when a user visits a malicious website and browser adware service possibly prompts the user to make some clicks.
Not all website are genuine, some are merely set up to deliver malware payloads and infect your systems once visited. You are therefore advised to really check before you Click or download things.
When in doubt of a particular file or website domain URL (Uniform Resource Locator) you can use online resource URL like https://virustotal.com to scan it to ascertain if it is safe.
One should also be very careful and observant whenever the system and or browser starts behaving abnormal. This can be in form of unnecessary slowness or frequent freezing of the windows system or the browser. It is strongly advised that you have local anti-virus (malware) scanner to keep your system clean and secure.
Stop, Check, before you Click
Thanks
Engr. Chikwado Okeke
Cybersecurity Professional
https://possibond.com.
+234(0)8127944123