Machete Malware hacking its way through Latin America

ECUADOR, VENEZUELA, COLOMBIA BIGGEST VICTIMS IN LATIN AMERICA

What is “Machete”?

SECURELIST.COM REPORTED…”Machete” is a targeted attack campaign with Spanish speaking roots. We believe this campaign started in 2010 and was renewed with an improved infrastructure in 2012. The operation may be still “active”.

The malware is capable of the following cyber-espionage operations:

Logging keystrokes
Capturing audio from the computer’s microphone
Capturing screenshots
Capturing geolocation data
Taking photos from the computer’s web camera
Copying files to a remote server
Copying files to a special USB device if inserted
Hijjacking the clipboard and capturing information from the target machine

SAFETY AND SECURITY IN ECUADOR – READ THIS BOOK

ALERT FOR THESE POWERPOINT FILES
Hermosa XXX.pps.rar
Suntzu.rar
El arte de la guerra.rar
Hot brazilian XXX.rar

WATCH OUT FOR THESE DOMAINS – SHOULD BE RED FLAG

Domains

The following are domains found during the infection campaign. Any communication with them must be considered extremely suspicious

java.serveblog.net
agaliarept.com
frejabe.com
grannegral.com
plushbr.com
xmailliwx.com
blogwhereyou.com (sinkholed by Kaspersky Lab)
grannegral.com (sinkholed by Kaspersky Lab)
READ ARTICLE