CronRat Magecart malware uses 31st February date to remain undetected
1 min read
Nov 29, 2021
Security researchers have discovered a Linux-based remote access trojan (RAT) that uses an unusual stealth technique to remain out of sight from security products. The malware, dubbed CronRat, hides in the calendar subsystem of Linux servers (“cron”) on a non-existent day, 31 February, according to a blog post by security researchers at Sansec.
The researchers said that CronRat “enables server-side Magecart data theft which bypasses browser-based security solutions”. The malware was discovered on several eCommerce websites injecting Magecart payment skimmers in server-side code.
Related Articles
1 - 0 min read
Millions Of GitHub Repositories Infected With Malicious Code
1 - 0 min read
Multiple Chromium DoS, Info Disclosure Vulns Fixed [Updated]
