New Fileless Malware Discovered
Security researchers from Microsoft and Cisco Talos have discovered a new malware loader dubbed "Nodersok" and "Divergent,” which is being distributed through online advertisements.
According to Microsoft, the Nodersok (and Divergent) campaign has been pestering thousands of machines in the last several weeks, with most targets located in the United States and Europe. “The majority of targets are consumers, but about 3% of encounters are observed in organizations in sectors like education, professional services, healthcare, finance, and retail,” said the company in a blog post.
What makes this malware unique, according to the Hacker News is the fact that “it's an advanced fileless malware, and second, it leverages only legitimate built-in system utilities and third-party tools to extend its functionality and compromise computers, rather than using any malicious piece of code.”