Trojan.MacOS.FAKE3L3CTRON.A

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Information Theft

This Trojan gathers the following data:

• Product Version
• System Information

Other Details

This Trojan does the following:

• It is a trojanized library for Mac Operating System.
  
• It also connects randomly to one of these encrypted embedded domains:
  • {BLOCKED}ageazure.com/analysis
  • {BLOCKED}storagebox.com/api/biosync
  • {BLOCKED}studiofactory.com/groupcore
  • {BLOCKED}eploystore.com/cloud/images
  • {BLOCKED}ageboxes.com/xbox
  • {BLOCKED}addons.com/quality
  • {BLOCKED}slabs.com/status
  • {BLOCKED}ryblogs.com/xmlquery
  • {BLOCKED}udeservices.com/network
  • {BLOCKED}nenetwork.com/phone
  • {BLOCKED}techcloudservices.com/v2/fileapi
  • {BLOCKED}nlinestorage.com/google/storage
  • {BLOCKED}packageinfo.com/ms-webview
  • {BLOCKED}dservice.com/v1/status
  • {BLOCKED}rces.com/queue