Cyber Risks · Krebs on Security

Software Cracks: A Great Way to Infect Your PC

Summary: Immunet engineering VP Alfred Huger told Krebs on Security that about 90% of false-positive rollbacks involving more than 10 convictions turn out to be real malware, and that users who roll files back almost always say the file was a crack or pirated material. In the prior week, more than 100 Immunet users rolled back infected files that installed copies of the Conficker worm, and 484 users rolled files out of quarantine in a 7-day span.

Key Takeaway: Huger's data comes from users who actively overrode their antivirus and pulled a convicted file back out of quarantine - meaning the infection arrived with the user's explicit consent, not through a missed signature. The recurring payloads he names are Conficker, Sality and Mazben, and he describes them arriving in waves as someone successfully seeds the networks.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related