Kaspersky Lab specialists reported the distribution of a virus disguised as an installer
The Trojan virus is disguised as the original Tor installer, which is blocked in China. Users download the program from third-party sites, which is what the attackers took advantage of.
The malicious copy of the browser contains the historyviews and configured to cache pages on disk, automatically fill out forms and remember login data. In addition, the program stores additional session data for websites.
As a result, many users - subscribers of the popular YouTube channel - suffered. In total, he has 180 thousand subscribers.
“More importantly, one of the librariesassociated with the malicious Tor browser is infected with spyware that collects various personal data and sends them to the command and control server. Spyware also provides the ability to execute commands on the victim computer, giving the attacker control over it.