Modified version of Tor Browser spies on Chinese users
Cybersecurity biz Kaspersky has spotted a modified version of the Tor Browser it says collects sensitive data on Chinese users.
The data collected by the browser itself includes internet history and data entered into website forms, said the threat hunter. More spyware was hidden in an accompanying library that collected further data, including computer name and location, user name, and MAC addresses of network adapters, before sending it to a command and control server.
The icing on the cake is an embedded functionality to execute shell commands, thus giving the attacker full control over the machine. The Tor Browser is designed for anonymity and enables use of the dark web. While some of the activity it facilitates is illegal, it is also often used for legitimate purposes. However, it is blocked in China.
Which is why Chinese residents sometimes resort to creative ways of downloading it, usually from third-party websites. In the case of the malicious version found by a link was posted in January 2022 on a YouTube channel that advocates internet anonymity in the Chinese language.The malicious Tor Browser installer was hosted on a Chinese cloud sharing service and appears identical in terms of user interface to the authentic one. However, it did not have a digital signature and some of the files obviously differed from the original, said Kaspersky.
Danmark Seneste Nyt, Danmark Overskrifter
Similar News:Du kan også læse nyheder, der ligner denne, som vi har indsamlet fra andre nyhedskilder.
Study finds the majority of post-vaccination monkeypox infections occur within 2 weeks of receiving the first dose of MVA-BNStudy finds the majority of post-vaccination monkeypox infections occur within 2 weeks of receiving the first dose of MVA-BN howardbrownhc JAMANetwork vaccination monkeypox virus vaccine infection
Læs mere »
Some of Debian 12 won't be FOSSVote result good news for new users, but might be bad for remixes
Læs mere »
Warning as viral iPhone scam can trick users into downloading dangerous softwareExperts are warning iPhone users about an 'especially common' scam which could compromise their private data.
Læs mere »
Facebook puts own Chromium WebView browser in Android appDon't mind Facebook, just putting its own browser in its Android app
Læs mere »
PlayStation open to FromSoftware film and TV 'opportunities'Sony has said it's 'not unthinkable' it will now develop film or TV versions of FromSoftware games following its recent…
Læs mere »
Kristen Stewart’s Edgy New Hair Is The Grunge Version Of The Classic Pixie CropOne Vogue staffer christened the look “grunge Princess Di”.
Læs mere »