Porn users have been warned as a type of malware may be secretly filming them.
Yep, there’s apparently been an increase in cybercriminals using Stealerium which takes screenshots of your screen as well as taking images from your webcam.
It can even access your sensitive and private data like passwords or banking information. Then, any content captured or stolen may be used for blackmail and extortion by criminals – such as by ‘sextortionists’.
This malware can end up on your laptop via the likes of scam emails and if you click on a malicious link or open up an attached file.
Advert
Then once it's on your device, it can quickly start scanning through and access your webcam. While researchers say the capturing of victims browsing porn isn’t particularly common, it’s very much still possible.
How does the malware get on your device?
Stealerium had been billed as downloadable for ‘educational purposes’ but ‘cybercriminal threat actors’ may adopt and modify the malware to make it more malicious.
Researchers at Proofpoint found various different messages that were sent for campaigns to get the malware out there. This included sending emails impersonated organisations like charitable foundations, banks and courts.
The messages then contain compressed JavaScript files that would install the malware ‘and performed network reconnaissance to gather Wi-Fi profiles and nearby networks’.
Stealerium is described as a ‘full-featured stealer’ that has the capabilities to 'exfiltrate a large variety of data including browser cookies and credentials, credit card data (via web form scraping), session tokens from gaming services such as Steam, crypto wallet data, and various types of sensitive files'.
How is the malware used for 'sextortion'?
Researchers say as well as its data-stealing abilities, the malware has a feature solely focusing on data relating to pornography.
“It’s able to detect adult content-related open browser tabs and takes a desktop screenshot as well as a webcam image capture. This is likely later used for 'sextortion'. While this feature is not novel among cybercrime malware, it is not often observed,” Proofpoint explain.
Once the content is detected, it takes both a desktop and webcam screenshot.
Although it’s noted that there aren’t many cases of ‘sextortion’ from malware, it may just be that people are embarrassed and don’t want to report it.
How to protect yourself from malware
Be extremely cautious with emails, and never click links or open attachments unless you’re absolutely certain they’re safe.
Also, type website addresses manually and verify suspicious messages.
Additional things you can do are physically covering your webcam when it's not in use, keeping your system and antivirus software up to date, and regularly installing security patches.
Topics: Crime, Technology, Adult Industry
Jess Battison