A type of actively spreading CryptoMiner Trojan, WinstarNssmMiner4, disguises itself as different kinds of utility software installers. Compared with the last version, this version is downloaded or promoted by known good software like Wget and obfuscates all of its execution scripts to avoid antivirus detection.

WinstarNssmMiner3 is a type of actively spreading CryptoMiner Trojan and installed with software cracks and plugins. It is highly recommended to download softwares from the official websites instead of unknown sources.

A new cryptominer Trojan monitors clipboard activity to detect if it contains the account address of cryptocurrency such as Bitcoin. It modifies the receiving address to its own address to achieve the purpose of theft when user pays by cryptocurrency.

WinstarNssmMiner2 is a Trojan disguises itself as normal utilities such as browser Vivaldi and is distributed with software installers. It is highly recommended to download softwares from the official websites instead of unknown sources.

Recently, 360 Security Center has observed a small outbreak of Bondat, a widespread worm family. It aims to exploit victims’ machines to build a botnet…