Security researchers identified a new persistent threat borne from a combination of components particular to Cosmu and MiniDuke malware families.Because the analyzed samples integrated a loader related to the one used by MiniDuke and a payload very similar to what Cosmu employed, F-Secure decided to name it CosmicDuke.The malware features data collection components that include keylogging, stealing clipboard content, taking screenshots and stealing passwords from popular chat and email clients…
Comments are closed.
