Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: InvisiMole spyware turns affected computer into video camera

11 Jun 2018   #1
Brink

64-bit Windows 10 Pro
 
 
InvisiMole spyware turns affected computer into video camera

Quote:
This is the modus operandi of the two malicious components of InvisiMole. They turn the affected computer into a video camera, letting the attackers see and hear what’s going on in the victim’s office or wherever their device may be. Uninvited, InvisiMole’s operators access the system, closely monitoring the victim’s activities and stealing the victim’s secrets.

Our telemetry indicates that the malicious actors behind this malware have been active at least since 2013, yet the cyber-espionage tool was never analyzed nor detected until discovered by ESET products on compromised computers in Ukraine and Russia.

The campaign is highly targeted – no wonder the malware has a low infection ratio, with only a few dozen computers being affected.

InvisiMole has a modular architecture, starting its journey with a wrapper DLL, and performing its activities using two other modules that are embedded in its resources. Both of the modules are feature-rich backdoors, which together give it the ability to gather as much information about the target as possible.

Extra measures are taken to avoid attracting the attention of the compromised user, enabling the malware to reside on the system for a longer period of time. How the spyware was spread to the infected machines is yet to be determined by further investigation. All infection vectors are possible, including installation facilitated by physical access to the machine...

Conclusion

InvisiMole is fully-equipped spyware whose rich capabilities can surely compete with other espionage tools seen in the wild.

We can only wonder why the authors decided to use two modules with overlapping capabilities. One might think the smaller module, RC2FM, is used as an initial reconnaissance tool, while the bigger RC2CL module is only run on interesting targets. This is, however, not the case – both of the modules are launched simultaneously. Another possible explanation is that the modules might have been crafted by various authors and then bundled together to provide the malware operators a more complex range of functionalities.

The malware uses only a few techniques to avoid detection and analysis, yet, deployed against a very small number of high-value targets, it was able to stay under the radar for at least five years....


Read more: InvisiMole spyware hunting for secrets while staying deep in the shadows

See also: malware-ioc/invisimole at master - eset/malware-ioc - GitHub


My System SpecsSystem Spec
.
11 Jun 2018   #2
Lady Fitzgerald

Win 7 Ultimate 64 bit
 
 

And people wonder why I remove the webcam software on my notebook and put tape over the camera lens.
My System SpecsSystem Spec
11 Jun 2018   #3
Brink

64-bit Windows 10 Pro
 
 

Surprise, you're on Candid Camera.
My System SpecsSystem Spec
.

11 Jun 2018   #4
Paul Black

7 HP SP1 64-bit Vista HB SP2 32-bit Linux Mint 18.3
 
 

Quote   Quote: Originally Posted by Brink View Post
Surprise, you're on Candid Camera.
My System SpecsSystem Spec
11 Jun 2018   #5
chefduane

Win 7 Home Prem x64 SP1
 
 

I use a simple plastic lens blocker to physically cover my lens. Sometimes the simplest solution (low tech) is the best solution.
My System SpecsSystem Spec
11 Jun 2018   #6
Barman58

Windows 10 Pro x64 x3, Ubuntu
 
 

Erm, Russia and the Ukraine affected - perhaps it's just Vladimir checking next years election results
My System SpecsSystem Spec
11 Jun 2018   #7
goodlad

windows 7 ultimate x32
 
 

how is protecting/covering lens going to stop users from accessing your content ? I don't use any protection but my system notifies me when ever webcam gets turned on. My laptop is only open when I am working other time it just sleeps face down when I'm not. Only thing they will be able to access is dark keyboard, lol !
My System SpecsSystem Spec
11 Jun 2018   #8
chefduane

Win 7 Home Prem x64 SP1
 
 

Quote   Quote: Originally Posted by goodlad View Post
how is protecting/covering lens going to stop users from accessing your content ? I don't use any protection but my system notifies me when ever webcam gets turned on. My laptop is only open when I am working other time it just sleeps face down when I'm not. Only thing they will be able to access is dark keyboard, lol !
It won't. But the OP was about surreptitiously turning on your camera to spy on you and the goings on in the surrounding area. For desktop users a lens cover will protect from that. When you close your laptop you are effectively using a lens cover.
My System SpecsSystem Spec
11 Jun 2018   #9
Brds7t7

Windows 7 Pro & Ultimate, Windows 8.1 Pro, Linux Mint 19 Cinnamon (All 64-Bit)
 
 

Not a big webcam or skype user, so I rarely use a webcam these days. When it's not being used on my desktop systems I keep it unplugged, and I don't even have the drivers enabled or software installed for it on my laptop.
My System SpecsSystem Spec
11 Jun 2018   #10
townsbg

Windows 7 pro 64-bit sp 1
 
 

Because I'm paranoid my integrated camera is disabled in devise manager and the USB one is disconnected.
My System SpecsSystem Spec
Reply

 InvisiMole spyware turns affected computer into video camera




Thread Tools




Similar help and support threads
Thread Forum
While playing video games my computer screen turns black or blank
So I ve encounterd this issue while im playing video games (mostly Tera), in the middle of the game the computer screen goes black (sometemies even other colors), but my computer is still running, although my Hard drive indicator isnt blinking. I have a: Intel core i5 3570k, Asus gtx 770, 8 gb...
General Discussion
Win7 PRO- Issues with transferring HD Video from Camera to Computer!!!
I already sent questions to CANON concerning this issue, but since this O.S. is an WIN7, maybe it's hardware is not supported to newer camera technology. (Device drivers) New Camera, maybe too old O.S., which I doubt, since lots of people still use Win7. On Christmas Eve I shot about 18 HD...
Hardware & Devices
computer turns on for a few seconds then turns off
okay so i am able to turn my computer on for a few seconds but then it automatically shuts itself off after a few seconds but the thing is after letting it sit for a couple seconds it says something about how the clocks on my processor have been overclocked too high and asks if it wants me to...
General Discussion
How do I stop Video Web Camera?
How do I stop the "Video Web Camera" from launching in Windows 7? I don't want it and it keeps getting in the way when I mouse near it. (I know I can close it, but I don't want to do that every time I reboot.)
Customization
OS will not see video camera
I'm trying to connect my HV20 to my laptop via firewire. When I plug it in, I don't get tones or any notification from Windows that it sees my camera. I know it's not the port as I've connected an external HDD via firewire to that port and it was found. I tested the camera on a different...
Hardware & Devices


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 07:36.
Twitter Facebook Google+