Fruity trojan downloader performs multi-stage infection of Windows computers, masquerading as apps for fine-tuning CPUs, graphic cards, and BIOS, for hardware-monitoring, and others.
Summary
What is Trojan.Fruity.1?
- A modular downloader trojan that can be used to distribute other malware.
- Distributed through malicious websites and software installers that appear to be legitimate.
- Once installed, Trojan.Fruity.1 begins a multi-stage infection process that can ultimately lead to the installation of the Remcos RAT spyware.
How does it work?
- The trojan is implanted into legitimate programs, such as Python libraries, VLC mediaplayer, and VMWare virtualization software.
- The trojan uses a variety of techniques to evade detection, including encryption, steganography, and process hollowing.
- The trojan can be used to infect computers with other malware, such as ransomware, cryptominers, and backdoors.
How to prevent infection?
- Only download software from trusted sources.
