According to a study released by a group of cyber security experts, Unit 42, Palo Alto Networks, the malware that pretends to update Adobe Flash, secretly installs on the computer the miner XMRig. He produces a cryptocurrency Monero (XMR).
According to experts, the malware authors have carefully copied the toast official installer Adobe. Moreover, the download do Flash updates to the latest version. Analyst brad Duncan from Unit 42 says:
Usually the fake update Flash malware is not very well hidden, but in this case, the potential victim may not notice anything unusual.
Professionals Unit 42 stumbled upon a novelty in the search for the popular fake update Flash using AutoFocus, analytical tool Palo Alto Networks.
Recall that, according to a study prepared in August, scientists from the Rhine-Westphalian technical University of Aachen (Germany), the most popular browser miner XMR remains Coinhive (he is particularly active in Brazil). Monero developers are not satisfied with the current reputation of crypto currency, so they created a special website where users can get information about how to remove such malware.