LOBSHOT Malware Abuses Google Ads And VNC Access To Take Over Windows Systems

Recently the technique of using Google advertisements to impersonate legitimate websites to distribute malware has been used by many malware strains. According to Elastic Security Labs' report, LOBSHOT is a new RAT that also uses this technique, disguising its distribution website as AnyDesk. After the infection, LOBSHOT checks if Microsoft Defender is on to avoid detection and also looks for crypto extensions. Read more...