Hackers are using malicious emails disguised as important Swift messages to spread the cross-platform remote access trojan (RAT) Adwind. According to Comodo Group’s Threat Research Lab, the spam messages claim to contain important information regarding a “wire bank transfer to your designated bank account” from the Swift network, the global banking industry’s payments messaging system. The phishing email prompts users to review an attached document to check the details and make sure there are no discrepancies regarding the transfer. The seemingly secure document, however, actually contains the Adwind malware that is capable of exfiltrating data from the infected computer, modifying the system registry and more.
ORIGINAL SOURCE: International Business Times
