Hackers are reportedly abusing compromised Skype accounts in an attempt to distribute the DarkGate malware.
In a new report, Trend Micro researchers claimed multiple Skype accounts had been compromised and then used to share a VBA loader script attachment. The script’s file name was modified in such a way to have victims believe it’s a .PDF file, even though it was a .VBS one.
Downloading and running the script downloads a second-stage AutoIT payload which contains the malicious DarkGate malware code.
