The researchers claimed that one of the world's most popular software download sites had been hijacked by hackers to deliver malware alongside commonly used programs. According to a report by Dr. Web, a link to download the free VSDC video conversion tool on the CNET website has been compromised, forcing users to download a modified installer loaded with a Trojan horse. This malware allowed Hackers bypass pre-installed antivirus programs installed on the victim's device and take control of the system.
Compromised VSDC download
The report says that the hackers may have compromised the download link on the CNET website to target victims based on their location. Some users in certain markets were able to download the authentic software, while others got the compromise. Once the malware was installed, it was able to connect to a remote server and download additional modules such as an RDP remote control trojan, Predator The Thief thief, a SystemBC trojan proxy, and an X key recorder. Among other files on the server, the security agency also tracked down a compromised NordVPN installation file – TechRadar Pro contacted NordVPN for comment. According to internet statistics, the CNET download page has more than 90 million users per month, which has allowed hackers to access a large user base to target. Since VSDC is a well-known free software for video editing, video conversion and is used to burn files to CD, hackers decided to target users who wanted to download it. Doctor Web Security experts removed the infected files from the server and users who downloaded the video editor using the CNET website link are invited to run an antivirus scan on their computers. Via: Dr. Web