Google Chrome and Mozilla Firefox users beware—your personal data could be at risk.
A new virus, called Vega Stealer, allows hackers to steal passwords and credit card information stored in Chrome and Firefox. The malware also has the ability to scan and screenshot Word, Excel and PDF documents.
The malware is being spread using phishing emails that contain a malicious attachment called “brief.doc.” The document contains macros that download and execute Vega Stealer.
According to Fox News, the phishing campaign isn’t sophisticated—it features subject lines such as “Online store developer required” and is often sent to company distribution lists like “info@” and “clientservice@.”
So far, the phishing scheme has only targeted companies in the marketing, advertising, public relations, retail, and manufacturing industries. However, according to security researchers, Vega Stealer has the potential to become a common threat.
What you can do to protect yourself
Typically, phishing emails have a few common characteristics that may help you identify them.
- Vague or irrelevant subject lines
- Grammatical errors, such as misspelled words and misused punctuation
- Unexpected or unnecessary attachments
While your email spam filter should block most phishing attempts from reaching your inbox, there are those that may occasionally slip through the cracks. If you suspect that you’ve received a phishing email, do not download, open or click on links or attachments.
Awareness and prevention are often the best ways to combat cyberthreats. Protect your business data by alerting employees to potential threats and sharing tips for identifying them.
At Aldridge, our team of IT professionals can provide your business with the resources it needs to reach its potential. We specialize in service and support, and can deliver a strategy that effectively manages your IT. Our approach relieves clients of the hassle of technology management so that they can focus on running their business. Contact an Aldridge representative today to learn more about cybersecurity and data protection.