They do n’t make them like this anymore .
Anyone who visit FossHub on Tuesday to download either Start Menu replacement Classic Shell or the audio editor program Audacity is at risk of exposure of having downloaded a Dardanian that feels like something out of the early 90s . The malicious codification was written by a hack on crew calling themselves Pegglecrew .
YouTuberdanooct1explains that Pegglecrew ’s program is both firebrand new and largely undetected by sites likeVirusTotal . Even the phony installer is almost identical in filing cabinet size to the original . Opening the septic version of either Audacity or Classic Shell appears to do nothing , but on reboot the drug user is greeted with the following message :
As you boot , you find that something has overwritten your MBR ! It is a sad affair your adventures have ended here ! mastermind all hate to Pegglecrew ( @cultofrazer on Twitter )
The trojan ’s intent does not appear to be destructive , as the substance states precisely why the user ’s machine is no longer functioning as expected ( and in the cadency of a Greco-Roman text - based RPG . ) Booting into a recovery CD and do a immediate command to touch on the victor boot record appears to reestablish arrangement functions to normal , fit in to danooct1 .
Severaltweetssuggest Pegglecrew ’s workplace has appeared in the wild on multiple machines . Ironically , cultofrazerappears to either be inactive , or has itself been hacked . It ’s unreadable if the trojan has any lasting effects beyond a punch-drunk and somewhat annoying message .
Inan email to Softpedia , someone claim to be a phallus of Pegglecrew wrote :
“ In unretentive , a web service with no assay-mark was scupper to the cyberspace … We were able to catch data from this web service to obtain origin code and passwords that extend us further into the substructure of FOSSHub and eventually gain control of their production machine , backup and mirror locations , and FTP credential for the cache table service they habituate , as well as the Google Apps - host e-mail . ”
FossHub ’s tagline let in the promises , “ No adware , no spyware , no sheaf , no malware , ” which was proven largely untrue by the hacking group . temerity write in a blog post that the compromised download was up forapproximately three hour , and has since been resolved , though the same alleged Pegglecrew appendage claims that , “ after word get under one’s skin out and the admins revert the changes , we replaced all installer executables on [ Fosshub ’s ] servers with the MBR - overwrite code immediately . ”
Pegglecrew was antecedently responsible for hack intoRingo Starr ’s Twitter accountand wrecking havoc on theSuper Smash Bros. subreddit .
Update August 4 , 12:43pm : Pegglecrew got in cutaneous senses with Gizmodo on Twitter to explain that the cultofrazer handle was in fact stolen by them from Razer — the gaminghardware manufacturer — who then take it back . They also offered some explanation for their actions .
“ We targeted Fosshub because we wanted inform people to keep better care of their security measure … all of the users actually clicked past a prompt telling them that it could be dangerous , ” the group secern Gizmodo over DM . “ That ’s just one example of user carelessness and it barely amounts to the amount of dire passwords ( also work in this flack ) and other abominable practices . ”
They estimate Classic Shell downloads alone were responsible for infecting over 300 machines but claim the trojan itself has been in utilization by them for months beforehand . Thankfully Pegglecrew claim their malware has “ zero effect other than overwrite the MBR , ” which might be cold quilt to the hundreds of peeve users essay to figure out why their computers wo n’t start up .
HackersTrojan
Daily Newsletter
Get the best tech , science , and culture word in your inbox daily .
News from the future , delivered to your present .
Please select your desired newssheet and submit your email to upgrade your inbox .
You May Also Like
