Google Chrome users have been warned that their credit card details are at risk, thanks to a nefarious and dangerous malware that is now targeting the market-leading browser. Proofpoint security experts have discovered that the notorious Emotet malware attempts to steal sensitive financial information from Google Chrome users. The Emotet malware was first discovered in 2014, and although it started life as a banking Trojan, it has become one of the most dangerous malware available to hackers.
The malware can spread easily from computer to computer and can evade traditional antivirus software, thanks to subtle coding tweaks that are introduced on a regular basis.
Emotot is estimated to have caused millions of pounds of total damage throughout its history.
Emotet is usually spread through email scam campaigns, and in addition to loading malware that targets banking apps, it can also be used for ransomware attacks.
Highlight the new danger for Chrome usersProofpoint’s Threat Insight team said: “On June 6, Proofpoint observed a new #Emotet module being removed by the E4 botnet. To our surprise, it was a credit card thief that only targeted the Chrome browser. exfiltrated to other C2 servers than the loader module.”
The new threat specifically targets Chrome users who have saved credit card information on their profile.
As always with malware threats, there are a few best practices you can put in place today to protect yourself against this threat and others like it.
First, Emotet is widely distributed via dangerous emails, so always be careful what message you click in your inbox for Gmail, Hotmail, Outlook or other type of email provider.
And if you end up accidentally clicking on such a message, be very careful about attached files or links directing you to external websites.
You can usually spot a scam a mile away by double-checking a few things. Fraudulent messages usually contain typos or grammatical errors that you usually won’t find in messages from reputable organizations.
Also, if you’ve received a message that you’re not sure is legitimate, check the sender’s email address.
If the email is genuine, the email must be sent from an official domain name. If it’s being sent from a Gmail account or domain that looks legit but isn’t quite the same as the official one, alarm bells should ring.
If you perform all these checks but are still not sure, you can always contact the organization in question to clarify whether the email you received is genuine or not.
Although it takes a little longer, it will save you a lot more time that would be wasted due to stress or stolen money if you fell victim to such a scam.
And given how dangerous Emotet is, you’ll want to make sure you do everything you can to avoid it at all costs.
Speaking previously, Europol described Emotet as “the most dangerous malware in the world”.
The European law enforcement agency said: “EMOTET is one of the most professional and long-lasting cybercrime services. The infrastructure has essentially acted as a main door opener for computer systems to Once this unauthorized access was established, these were sold to other high profile criminal groups to deploy other illicit activities such as data theft and extortion through ransomware .