Mars Stealer’s Cryptomining Attack Campaign Targets OpenOffice
Morphisec laid bare a new Mars Stealer campaign—abusing Google Ads ranking techniques—to lure Canadian users into downloading a malicious version of OpenOffice. A bug in the configuration instructions of the cracked version of Mars Stealer, which appears to be an honest mistake by the operators, gives anyone access to the logs directory of victims. Organizations are suggested to protect sensitive data with proper access management and encryption.