Hackers target Microsoft Office and Adobe Photoshop software 'cracks'

(Image credit: Shutterstock / song_about_summer)

'Cracks', small programs that allow consumers to use commercial software without paying for the license, are still popular among businesses and individuals despite security risks, experts have warned.

A report from cybersecurity firm Bitdefender highlighted cracks for Microsoft Office and Photoshop CC, and besides the obvious legal implications, users are risking ceding full control over their devices to hackers and criminals.

Bitdefender has spotted a campaign in which the crack deploys the ncat.exe malware on the device, together with the TOR proxy. Netcat can be installed on the device under one of these names:

Money-stealing backdoor

Bitdefender claims the result is a “powerful backdoor” that uses the TOR network to communicate with its command and control server. Once established, the backdoor can do all sorts of nasties, including file exfiltration (it uses BitTorrent to exfiltrate data), firewall disabling (in preparation of file exfiltration), or Firefox profile data theft.

By stealing Firefox cookies, Bitdefender explains, attackers can load them onto a different device to completely bypass passwords for various online services, or render 2FA useless.

It can also access the Monero cryptocurrency wallet and steal any tokens it finds there. This, most likely, works for other cryptocurrency wallets as well, given that the list of actions is “non-exhaustive”. “Attackers have complete control of the system,” the researchers explained, “and can adapt campaigns based on their current interests.”

Most instances of the malware were found in the United States, India and Greece, with Canada, France, the UK and Spain being notable mentions. The malware has also been seen in Australia, Latin America, and most of Europe.

Here's our list of the best antivirus software available today

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.