Windows 11 Upgrade – Fake Campaign is back Again & Again to steal the rest of what you have.

OVERVIEW

Attack was active on Feb-08-2022 through RedLine Malware, now it’s more effective and researchers named that as “Inno Stealer”.

According to CloudSEK, the threat actors have fabricated a website which mimics the promotional pages of Microsoft with official Microsoft Logos and Favicons.

This campaign targets the various Browser’s Data & Crypto wallets especially Chrome, 360 Browser, Edge, Comodo, Brave, Vivaldi, and Opera.  

This website will be pointless if you try to download it through the TOR or VPN connections. If downloaded through a direct connection, an ISO file that hides the executable for that info stealer.

ANATOMY OF INNO STEALER?

WEB BROWSERS TARGETED BY INNO STEALER

CRYPTO WALLETS AND ITS LOCATIONS TARGETED BY INNO STEALER

RECOMMENDATIONS

Any downloads or installations on your Mobile or System needs to be ensured that the source is validated effectively. Do not download any software from unknown sources or attractive advertisement websites, which will be pernicious to your system. And at the end of the day you might be left with Nothing in your crypto wallets / accounts.

Safe Browsing and Selective installations ahead!!!