Malware blocks infected computers from visiting websites dedicated to software piracy. SophosLabs researcher Andrew Brandt called it one of the strangest cases I ve seen in a while Malware works by modifying the HOSTS file on the infected system. Because the malware has no persistence mechanism, any infected user can easily remedy the effect it has on a local computer by removing the affected entries after they re added to the file. The malware also checks an infected system to see whether it can make an outbound network connection and, if it can, it attempts to contact a. URI on the domain 1flchier[.]com
Source: https://threatpost.com/oddball-malware-blocks-pirated-software/167060/