Shifu

By GoldSparrow in Trojans

Financial retailers have been targeted by countless malware threats. Among them is the Shifu Trojan, which has infected a huge amount of machines all over the Internet. Shifu can be disseminated via corrupted email attachments, torrents video codecs, corrupted websites and advertisements, etc. Once Shifu infects a machine, it will make copies of its files in your hard disk. After this, it executes itself and adds a new startup key into the Registry. Then, Shifu can start doing what it was programmed for: it opens a backdoor to the infected system, which allows its manipulators to collect any information kind they want.

Shifu was discovered in October 2015 and since then, is attacking Windows computer. Security analysts discovered various built-in features inside Shifu, which includes bot and RAT modules, a browsing hooking parser, analyze and monitoring of applications, tools that protect it against sandbox tools, research and virtual machines. If Shifu detects a point-of-sale, it can collect debit and credit card data. If you have a reason to suspect that your computer may b infected by Shifu and similar threats, you should make an in-depth scan of your entire computer and, if it is the case, use it to remove Shifu and any other threat present into your machine.

Related Posts

Trending

Most Viewed

Loading...