Blog | G5 Cyber Security

Nigerian 419 Scammers Evolving Into Malware Pushers (But Not Very Good Ones)

Nigeria’s 419 scammers are now also using malware, a Palo Alto Networks report says. The attackers are primarily using the NetWire remote access tool along with DataScrambler, a crypter used to evade anti-virus software. So far, the attackers are delivering these executables as email attachments. They are using dynamic DNS domains from NoIP for command-and-control, but in an effort to make it easier to manage their malicious activity, they’re making it easier for law enforcement officials to locate them.”]

Source: https://www.darkreading.com/attacks-breaches/nigerian-419-scammers-evolving-into-malware-pushers-but-not-very-good-ones-

Exit mobile version