Eternity Group Hackers Offering New LilithBot Malware as a Service to Cybercriminals

The risk actor driving the malware-as-a-services (MaaS) termed Eternity has been linked to new piece of malware known as LilithBot.

“It has highly developed capabilities to be applied as a miner, stealer, and a clipper along with its persistence mechanisms,” Zscaler ThreatLabz researchers Shatak Jain and Aditya Sharma explained in a Wednesday report.

“The team has been constantly maximizing the malware, adding advancements these types of as anti-debug and anti-VM checks.”

Eternity Job arrived on the scene earlier this calendar year, promotion its warez and products updates on a Telegram channel. The products and services offered include a stealer, miner, clipper, ransomware, USB worm, and a DDoS bot.

LilithBot is the newest addition to this record. Like its counterparts, the multifunctional malware bot is sold on a subscription foundation to other cybercriminals in return for a cryptocurrency payment.

Upon a effective compromise, the info collected through the bot – browser background, cookies, shots, and screenshots – is compressed into a ZIP archive (“report.zip”) and exfiltrated to a distant server.

The advancement is a indicator that the Eternity Job is actively growing its malware arsenal, not to point out adopting refined strategies to bypass detections.

Discovered this posting exciting? Observe THN on Fb, Twitter  and LinkedIn to examine more exceptional information we put up.

Some parts of this article are sourced from:
thehackernews.com