Known File News Today

Mar 3, 2021 Criminal operators have turned the infection method for “Gootkit” financial malware into a complex delivery platform for a wide range of malware, including ransomware. Sophos researchers have named the delivery platform, “Gootloader”. Gootloader attackers reach their targets by hacking into legitimate websites and subtly altering the content. As a result, the websites can show different content to different visitors. According to Sophos, the criminal operators manipulate sea...

Threat actors are using a new infection method dubbed “Gootloader” to trick users looking for advice, leading them to bogus forums with links to download malware instead, warns cybersecurity firm.

Gootloader is delivering malicious payloads through tightly targeted operations in the US, Germany and South Korea, according to Sophos.