Egeronix
Friday, May 16, 2025
  • Home
  • Egeronix Magazine
  • News
    • All
    • Business
    • Finance
    • Tech
    China Steps Up Oversight of DeepSeek, Its Promising AI Startup

    China Steps Up Oversight of DeepSeek, Its Promising AI Startup

    European Wine & Champagne Face 200% Tariff Threat from Trump

    European Wine & Champagne Face 200% Tariff Threat from Trump

    OpenAI Pushes for US to Codify ‘Fair Use’ in AI Training

    OpenAI Pushes for US to Codify ‘Fair Use’ in AI Training

    Bitcoin Reaches $100,000 Milestone as Trump Names Crypto Enthusiast to Financial Watchdog Role

    Bitcoin Reaches $100,000 Milestone as Trump Names Crypto Enthusiast to Financial Watchdog Role

    OpenAI Expands with Acquisition of Chat.com

    OpenAI Expands with Acquisition of Chat.com

    Gold Reaches Record High Amid Mideast Tensions and US Election Uncertainty

    Gold Reaches Record High Amid Mideast Tensions and US Election Uncertainty

    • Tech
    • Finance
    • Business
  • Entertainment
    • All
    • Movie
    • Music
    • Sport
    Gigi Hadid Shares How She Met Bradley Cooper at a Kid’s Party

    Gigi Hadid Shares How She Met Bradley Cooper at a Kid’s Party

    Megan Fox and Machine Gun Kelly Announce Pregnancy: Expecting Their First Baby Together

    Megan Fox and Machine Gun Kelly Announce Pregnancy: Expecting Their First Baby Together

    Rihanna Stuns in Rhinestone Heels While Supporting A$AP Rocky at Paris Fashion Week

    Rihanna Stuns in Rhinestone Heels While Supporting A$AP Rocky at Paris Fashion Week

    Furiosa: A Mad Max Saga Review – Anya Taylor-Joy Dominates the Screen in Thrilling Prequel

    Furiosa: A Mad Max Saga Review – Anya Taylor-Joy Dominates the Screen in Thrilling Prequel

    Jennifer Lopez Allegedly ‘Moving On Quickly’ From Ben Affleck Amid Divorce Rumors

    Jennifer Lopez Allegedly ‘Moving On Quickly’ From Ben Affleck Amid Divorce Rumors

    Jason Momoa Confirms Relationship with Actress Adria Arjona in Instagram Official Post

    Jason Momoa Confirms Relationship with Actress Adria Arjona in Instagram Official Post

    • Movie
    • Music
    • Sport
  • Lifestyle
    • All
    • Fashion
    • Food
    • Health
    • Travel & Hospitality
    Rinesa Murati’s Parisian Debut: A Stunning First Walk on the Versailles Runway

    Rinesa Murati’s Parisian Debut: A Stunning First Walk on the Versailles Runway

    Why Adding Chia Seeds to Your Water Is a Great Idea: Benefits and Tips

    Why Adding Chia Seeds to Your Water Is a Great Idea: Benefits and Tips

    Exploring Georgia: Where Ancient Traditions Meet Stunning Landscapes

    Exploring Georgia: Where Ancient Traditions Meet Stunning Landscapes

    Report Reveals Dozens of ‘High Hazard’ Toxins Commonly Found in Beauty Products

    Report Reveals Dozens of ‘High Hazard’ Toxins Commonly Found in Beauty Products

    Sustainability in Fashion: How Brands Are Embracing Eco-Friendly Practices

    Sustainability in Fashion: How Brands Are Embracing Eco-Friendly Practices

    Why Belize Should Be Your Next Travel Adventure

    Why Belize Should Be Your Next Travel Adventure

    • Travel & Hospitality
    • Health
    • Food
    • Fashion
  • Personal Development & Motivation
    3 Steps to Reclaim Control Over Your Life and Self-Worth

    3 Steps to Reclaim Control Over Your Life and Self-Worth

    Nurturing Great Ideas: How Top Teams Keep Them Alive

    Nurturing Great Ideas: How Top Teams Keep Them Alive

    How Self-Motivation Bridges the Gap Between Dreams and Realities

    How Self-Motivation Bridges the Gap Between Dreams and Realities

    Essential Financial Planning Tips: Wealth Lessons Everyone Should Learn at Every Stage of Life

    Essential Financial Planning Tips: Wealth Lessons Everyone Should Learn at Every Stage of Life

  • Impactful Individuals
    Rewriting Reality: The Vision of Emmanuel Vatankhah

    Rewriting Reality: The Vision of Emmanuel Vatankhah

    Siham Di Piazza: The Mermaid on a Mission

    Siham Di Piazza: The Mermaid on a Mission

    Sébastien Barthélemy: A Work of Heart in the World of Fashion

    Sébastien Barthélemy: A Work of Heart in the World of Fashion

    From Public Housing to Public Speaking: Denise Smith’s Journey of Empowerment and Legacy

    From Public Housing to Public Speaking: Denise Smith’s Journey of Empowerment and Legacy

No Result
View All Result
  • Home
  • Egeronix Magazine
  • News
    • All
    • Business
    • Finance
    • Tech
    China Steps Up Oversight of DeepSeek, Its Promising AI Startup

    China Steps Up Oversight of DeepSeek, Its Promising AI Startup

    European Wine & Champagne Face 200% Tariff Threat from Trump

    European Wine & Champagne Face 200% Tariff Threat from Trump

    OpenAI Pushes for US to Codify ‘Fair Use’ in AI Training

    OpenAI Pushes for US to Codify ‘Fair Use’ in AI Training

    Bitcoin Reaches $100,000 Milestone as Trump Names Crypto Enthusiast to Financial Watchdog Role

    Bitcoin Reaches $100,000 Milestone as Trump Names Crypto Enthusiast to Financial Watchdog Role

    OpenAI Expands with Acquisition of Chat.com

    OpenAI Expands with Acquisition of Chat.com

    Gold Reaches Record High Amid Mideast Tensions and US Election Uncertainty

    Gold Reaches Record High Amid Mideast Tensions and US Election Uncertainty

    • Tech
    • Finance
    • Business
  • Entertainment
    • All
    • Movie
    • Music
    • Sport
    Gigi Hadid Shares How She Met Bradley Cooper at a Kid’s Party

    Gigi Hadid Shares How She Met Bradley Cooper at a Kid’s Party

    Megan Fox and Machine Gun Kelly Announce Pregnancy: Expecting Their First Baby Together

    Megan Fox and Machine Gun Kelly Announce Pregnancy: Expecting Their First Baby Together

    Rihanna Stuns in Rhinestone Heels While Supporting A$AP Rocky at Paris Fashion Week

    Rihanna Stuns in Rhinestone Heels While Supporting A$AP Rocky at Paris Fashion Week

    Furiosa: A Mad Max Saga Review – Anya Taylor-Joy Dominates the Screen in Thrilling Prequel

    Furiosa: A Mad Max Saga Review – Anya Taylor-Joy Dominates the Screen in Thrilling Prequel

    Jennifer Lopez Allegedly ‘Moving On Quickly’ From Ben Affleck Amid Divorce Rumors

    Jennifer Lopez Allegedly ‘Moving On Quickly’ From Ben Affleck Amid Divorce Rumors

    Jason Momoa Confirms Relationship with Actress Adria Arjona in Instagram Official Post

    Jason Momoa Confirms Relationship with Actress Adria Arjona in Instagram Official Post

    • Movie
    • Music
    • Sport
  • Lifestyle
    • All
    • Fashion
    • Food
    • Health
    • Travel & Hospitality
    Rinesa Murati’s Parisian Debut: A Stunning First Walk on the Versailles Runway

    Rinesa Murati’s Parisian Debut: A Stunning First Walk on the Versailles Runway

    Why Adding Chia Seeds to Your Water Is a Great Idea: Benefits and Tips

    Why Adding Chia Seeds to Your Water Is a Great Idea: Benefits and Tips

    Exploring Georgia: Where Ancient Traditions Meet Stunning Landscapes

    Exploring Georgia: Where Ancient Traditions Meet Stunning Landscapes

    Report Reveals Dozens of ‘High Hazard’ Toxins Commonly Found in Beauty Products

    Report Reveals Dozens of ‘High Hazard’ Toxins Commonly Found in Beauty Products

    Sustainability in Fashion: How Brands Are Embracing Eco-Friendly Practices

    Sustainability in Fashion: How Brands Are Embracing Eco-Friendly Practices

    Why Belize Should Be Your Next Travel Adventure

    Why Belize Should Be Your Next Travel Adventure

    • Travel & Hospitality
    • Health
    • Food
    • Fashion
  • Personal Development & Motivation
    3 Steps to Reclaim Control Over Your Life and Self-Worth

    3 Steps to Reclaim Control Over Your Life and Self-Worth

    Nurturing Great Ideas: How Top Teams Keep Them Alive

    Nurturing Great Ideas: How Top Teams Keep Them Alive

    How Self-Motivation Bridges the Gap Between Dreams and Realities

    How Self-Motivation Bridges the Gap Between Dreams and Realities

    Essential Financial Planning Tips: Wealth Lessons Everyone Should Learn at Every Stage of Life

    Essential Financial Planning Tips: Wealth Lessons Everyone Should Learn at Every Stage of Life

  • Impactful Individuals
    Rewriting Reality: The Vision of Emmanuel Vatankhah

    Rewriting Reality: The Vision of Emmanuel Vatankhah

    Siham Di Piazza: The Mermaid on a Mission

    Siham Di Piazza: The Mermaid on a Mission

    Sébastien Barthélemy: A Work of Heart in the World of Fashion

    Sébastien Barthélemy: A Work of Heart in the World of Fashion

    From Public Housing to Public Speaking: Denise Smith’s Journey of Empowerment and Legacy

    From Public Housing to Public Speaking: Denise Smith’s Journey of Empowerment and Legacy

No Result
View All Result
Egeronix
No Result
View All Result
Home News Tech

Vietnam-Based Cybercriminals Exploit Malware to Harvest Financial Data Across Asia

by Egeronix Writer
April 4, 2024
in Tech
0
695
VIEWS
Share on FacebookShare on Whatsapp

A cyber threat group believed to originate from Vietnam has been actively engaging in cyberattacks across various countries in Asia and Southeast Asia, employing malware aimed at extracting critical information since May 2023.

Monitored by Cisco Talos under the designation CoralRaider, this group is identified as having a financial motivation. Their cyberattacks span across nations including India, China, South Korea, Bangladesh, Pakistan, Indonesia, and Vietnam.

According to security analysts Chetan Raghuprasad and Joey Chen, “The primary goal of this entity is to pilfer personal credentials, financial records, and social media profiles, specifically targeting commercial and advertising accounts. They deploy RotBot, a tailored version of Quasar RAT, and the XClient stealer as their main tools.”

The arsenal of this group also includes widely known malware tools such as AsyncRAT, NetSupport RAT, and Rhadamanthys, encompassing a mix of remote access trojans and data theft software.

The targeting of business and advertisement accounts has been of particular focus for attackers operating out of Vietnam, with various stealer malware families like Ducktail, NodeStealer, and VietCredCare deployed to take control of the accounts for further monetization.

The modus operandi entails the use of Telegram to exfiltrate the stolen information from victim machines, which is then traded in underground markets to generate illicit revenues.

“CoralRaider operators are based in Vietnam, based on the actor messages in their Telegram C2 bot channels and language preference in naming their bots, PDB strings, and other Vietnamese words hard-coded in their payload binaries,” the researchers said.

Attack chains start with a Windows shortcut file (LNK), although there is currently no clear explanation as to how these files are distributed to the targets.

Financial Data

Should the LNK file be opened, an HTML application (HTA) file is downloaded and executed from an attacker-controlled download server, which, in turn, runs an embedded Visual Basic script.

The script, for its part, decrypts and sequentially executes three other PowerShell scripts that are responsible for performing anti-VM and anti-analysis checks, circumventing Windows User Access Control (UAC), disabling Windows and application notifications, and downloading and running RotBot.

RotBot is configured to contact a Telegram bot and retrieve the XClient stealer malware and execute it in memory, ultimately facilitating the theft of cookies, credentials, and financial information from web browsers like Brave, Cốc Cốc, Google Chrome, Microsoft Edge, Mozilla Firefox, and Opera; Discord and Telegram data; and screenshots.

XClient is also engineered to siphon data from victims’ Facebook, Instagram, TikTok and YouTube accounts, gathering details about the payment methods and permissions associated with their Facebook business and ads accounts.

“RotBot is a variant of the Quasar RAT client that the threat actor has customized and compiled for this campaign,” the researchers said. “[XClient] has extensive information-stealing capability through its plugin module and various modules for performing remote administrative tasks.”

The development comes as Bitdefender disclosed details of a malvertising campaign on Facebook that’s taking advantage of the buzz surrounding generative AI tools to push an assortment of information stealers like Rilide, Vidar, IceRAT, and a new entrant known as Nova Stealer.

The starting point of the attack is the threat actor taking over an existing Facebook account and modifying its appearance to mimic well-known AI tools from Google, OpenAI, and Midjourney, and expanding their reach by running sponsored ads on the platform.

One is imposter page masquerading as Midjourney had 1.2 million followers before it was taken down on March 8, 2023. The threat actors managing the page were mainly from Vietnam, the U.S., Indonesia, the U.K., and Australia, among others.

“The malvertising campaigns have tremendous reach through Meta’s sponsored ad system and have actively been targeting European users from Germany, Poland, Italy, France, Belgium, Spain, the Netherlands, Romania, Sweden, and elsewhere,” the Romanian cybersecurity company said.

Egeronix Writer

Related Posts

China Steps Up Oversight of DeepSeek, Its Promising AI Startup

China Steps Up Oversight of DeepSeek, Its Promising AI Startup

March 14, 2025

Image Credits: Getty Images China is tightening its grip on DeepSeek, a rising AI company it considers crucial to national...

OpenAI Pushes for US to Codify ‘Fair Use’ in AI Training

OpenAI Pushes for US to Codify ‘Fair Use’ in AI Training

March 13, 2025

Image Credits:  Getty Images OpenAI has urged the US government to codify ‘fair use’ in AI training as part of...

OpenAI Expands with Acquisition of Chat.com

OpenAI Expands with Acquisition of Chat.com

November 7, 2024

OpenAI has acquired the domain Chat.com, adding it to its list of prominent web addresses. As of today, Chat.com now...

Ex-OpenAI CTO Mira Murati Launches New AI Startup, Reportedly Raising Funds

Ex-OpenAI CTO Mira Murati Launches New AI Startup, Reportedly Raising Funds

October 20, 2024

Mira Murati, the former OpenAI CTO who recently announced her departure, is reportedly securing venture capital funding for a new...

iOS 18: Next-Gen Siri and Time-Saving AI Notifications Boost Expected

iOS 18: Next-Gen Siri and Time-Saving AI Notifications Boost Expected

May 20, 2024

We've been hearing for a while that iOS 18 will be the biggest overhaul in the history of Apple's mobile...

OpenAI to Launch Google Search Rival Soon: A New Era for Search Begins.

OpenAI to Launch Google Search Rival Soon: A New Era for Search Begins.

May 10, 2024

When OpenAI introduced ChatGPT in 2022, it triggered concerns at Google's headquarters regarding the potential impact of OpenAI’s AI capabilities...

  • Trending
  • Comments
  • Latest
Albania: A Hidden Gem with Beaches, Mountains, Ancient Towns, and Budget-Friendly Delights

Albania: A Hidden Gem with Beaches, Mountains, Ancient Towns, and Budget-Friendly Delights

January 26, 2024
The Significance of Being Well-Dressed: Beyond Vanity

The Significance of Being Well-Dressed: Beyond Vanity

February 13, 2024
Timeless Elegance: The Rolex Datejust – A Reflection of Style and Substance

Timeless Elegance: The Rolex Datejust – A Reflection of Style and Substance

February 10, 2024
Jamaal Lewis: Celebrity Model, actor  and CEO of Stay Blessed Clothing

Jamaal Lewis: Celebrity Model, actor and CEO of Stay Blessed Clothing

March 5, 2024
Nurturing Great Ideas: How Top Teams Keep Them Alive

Nurturing Great Ideas: How Top Teams Keep Them Alive

Albania: A Hidden Gem with Beaches, Mountains, Ancient Towns, and Budget-Friendly Delights

Albania: A Hidden Gem with Beaches, Mountains, Ancient Towns, and Budget-Friendly Delights

Where to go in 2024: The best places to visit

Where to go in 2024: The best places to visit

Discovering Paradise: A Guide to Phuket, Thailand

Discovering Paradise: A Guide to Phuket, Thailand

Rewriting Reality: The Vision of Emmanuel Vatankhah

Rewriting Reality: The Vision of Emmanuel Vatankhah

May 15, 2025
Siham Di Piazza: The Mermaid on a Mission

Siham Di Piazza: The Mermaid on a Mission

May 9, 2025
Sébastien Barthélemy: A Work of Heart in the World of Fashion

Sébastien Barthélemy: A Work of Heart in the World of Fashion

April 24, 2025
From Public Housing to Public Speaking: Denise Smith’s Journey of Empowerment and Legacy

From Public Housing to Public Speaking: Denise Smith’s Journey of Empowerment and Legacy

March 22, 2025

Recent News

Rewriting Reality: The Vision of Emmanuel Vatankhah

Rewriting Reality: The Vision of Emmanuel Vatankhah

May 15, 2025
Siham Di Piazza: The Mermaid on a Mission

Siham Di Piazza: The Mermaid on a Mission

May 9, 2025
Sébastien Barthélemy: A Work of Heart in the World of Fashion

Sébastien Barthélemy: A Work of Heart in the World of Fashion

April 24, 2025
From Public Housing to Public Speaking: Denise Smith’s Journey of Empowerment and Legacy

From Public Housing to Public Speaking: Denise Smith’s Journey of Empowerment and Legacy

March 22, 2025

The global online magazine delivering fresh perspectives on news, fame, and inspiring stories. Discover insights that empower and captivate.

Follow Us on Social Media

Browse by Category

  • Business
  • Entertainment
  • Fashion
  • Finance
  • Food
  • Health
  • Impactful Individuals
  • Lifestyle
  • Movie
  • Music
  • News
  • Personal Development & Motivation
  • Sport
  • Tech
  • Travel & Hospitality

Recent News

Rewriting Reality: The Vision of Emmanuel Vatankhah

Rewriting Reality: The Vision of Emmanuel Vatankhah

May 15, 2025
Siham Di Piazza: The Mermaid on a Mission

Siham Di Piazza: The Mermaid on a Mission

May 9, 2025
  • Contact Us
  • About

© 2025 Egeronix Media - All rights reserved

No Result
View All Result
  • Home
  • Egeronix Magazine
  • News
    • Tech
    • Finance
    • Business
  • Entertainment
    • Movie
    • Music
    • Sport
  • Lifestyle
    • Travel & Hospitality
    • Health
    • Food
    • Fashion
  • Personal Development & Motivation
  • Impactful Individuals

© 2025 Egeronix Media - All rights reserved