An updated version of the widespread ransomware bitcoin Cerber, in addition to its “primary activities,” and now is capable of stealing browser passwords and login information in cryptocotyle. This writes OSzone.
Thus, according to the publication, the functionality of the program now goes far beyond the encryption of user files.
In a recent article, researchers from Trend Micro said about the previous method of distribution of the extortioner in the form of spam Email. Attachments JavaScript inside emails downloading new variant of Cerber. The latter is able to steal files from the three popular bitcoin client (wallet.dat from Bitcoin Core, *.wallet from Multibit and electrum.dat from Electrum).
Getting a file does not mean access by bitcoin, since it requires a password that protects the wallets. Cerber is able to steal passwords from Internet Explorer, Mozilla Firefox and Google Chrome. This happens before file encryption, data is sent to the server, and the file of purses removed from computers.
Earlier it was reported that over the past two years the program Cerber blackmailer managed to get $6.9 million