image credit: Adobe Stock

New “Whiffy Recon” Malware Triangulates Infected Device Location via Wi-Fi Every Minute

August 24, 2023

The SmokeLoader malware is being used to deliver a new Wi-Fi scanning malware strain called Whiffy Recon on compromised Windows machines.

“The new malware strain has only one operation. Every 60 seconds it triangulates the infected systems’ positions by scanning nearby Wi-Fi access points as a data point for Google’s geolocation API,” Secureworks Counter Threat Unit (CTU) said in a statement shared with The Hacker News. “The location returned by Google’s Geolocation API is then sent back to the adversary.”

Read More on The Hacker News