New Remote Access Trojan LOBSHOT spotted in Google Ads impersonating AnyDesk

A new malware called LOBSHOT is being distributed through Google Ads by impersonating a legitimate remote management software, AnyDesk.

Andrea Fortuna
When you're trying to run a C2 and play Minecraft at the same time.
https://www.shodan.io/host/168.119.64.48
#LOBSHOT #C2 #Shodan
168.119.64.48

Search Engine for the Internet of Things

Lobshot Malware erlaubt versteckten Fernzugriff auf Windows

Dank eines hVNC-Moduls können Angreifer einen mit der Lobshot-Malware infizierten Windows-Rechner unbemerkt aus der Ferne steuern.

Tarnkappe.info
New Lobshot hVNC malware spreads via Google ads

The previously undetected LOBSHOT malware is distributed using Google ads and gives operators VNC access to Windows devices. Researchers from Elastic Security Labs spotted a new remote access trojan dubbed LOBSHOT was being distributed through Google Ads. Threat actors are using an elaborate scheme of fake websites through Google Ads to spread their malware, the […]

Security Affairs