Trusted Design

A .NET malware abusing legitimate ffmpeg - Malwarebytes Labs | Malwarebytes Labs

概要

There is a growing trend among malware authors to incorporate legitimate applications in their malicious package. This time, we encountered a malware downloading a legitimate ffmpeg. Thanks to it, this simple spyware written in .NET got a powerful feature. Most of the malware is sufficient with sending screenshots, made periodically on the infected machine. This malware goes a step further and records full videos, spying on user activities. In this post, we will have a look at this and the other threats possessed by this sample.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• A Powerful .NET Spyware Creating Backdoor and Records Full videos, Spying on User Activities - GBHackers On Security (score: 0.69)
• Bloodhound malware on Metadefender.com (score: 0.63)
• Msil malware on Metadefender.com (score: 0.63)
• 0040eff71 malware on Metadefender.com (score: 0.62)
• B8d96178 malware on Metadefender.com (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る