NanoCore RAT is the name of malware that has been around since 2013. Security researchers at LMNTRIX Labs have discovered a new version of this malware that, when downloaded, enables the hacker utilizing the malware to steal your passwords and personal information from your computer as well as record audio and video of you using your webcam. For years the developer of this malware sold it on the Dark Web, that part of the Internet where criminals buy and sell goods and services, for as little as $25 although more advanced versions sold for higher prices. Now, however, a new version of NanoCore Rat is being offered on the Dark Web for free. The version being offered for free does not require any technical sophistication to use and it can be expected that there will be a dramatic increase in the use of this dangerous malware.
The good news is that the version of NanoCore RAT being given away like many forms of free malware exploit computer vulnerabilities that have been discovered years ago and security software to defend against these threats has been developed. The bad news is that many people fail to constantly update their security software whenever security updates are issued and are easy prey for this type of software.
Like most malware, NanoCore Rat is primarily distributed through phishing and spear phishing emails that lure you into clicking on links in the email and downloading the malware. Many of the phishing emails presently being used to distribute NanoCore Rat appear to be emails with invoices or purchase orders attached, however, the attachment is actually the NanoCore Rat malware. As always, the best thing you can do to protect yourself from these types of attacks is to follow my rule and never click on links or download attachments unless you have absolutely confirmed that they are legitimate. Also, you should make sure that you have good security software on all of your electronic devices and keep them updated with the latest security updates.
If you are not a subscriber to Scamicide.com and would like to receive daily emails with the Scam of the day, all you need to do is to go to the bottom of the initial page of http://www.scamicide.com and click on the tab that states “Sign up for this blog.”