Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?
New Ransomware Tactic: Qilin’s Chrome Credential Heist – A Nightmare for Network Security!
The Qilin ransomware group has added a new tactic to their playbook, using a custom stealer to swipe account credentials stored in the Google Chrome browser. Sophos X-Ops observed this alarming shift, marking a new low for ransomware strategies.
Hot Take:
Just when you thought ransomware couldn’t get any sneakier, Qilin proves that cybercriminals are the ultimate overachievers, now stealing your Chrome credentials too! Time to revisit those password management strategies people!
Key Points:
- Qilin ransomware group uses compromised VPN credentials to infiltrate networks.
- After a period of dormancy, they move laterally and modify Group Policy Objects (GPOs) to deploy a custom stealer.
- The stealer targets Google Chrome credentials and saves them to a shared folder.
- Credentials are sent to Qilin’s command and control server, and traces are wiped clean.
- Qilin then deploys ransomware across all domain-connected machines.
Already a member? Log in here