Attackers are stealing data with fake Microsoft Store app listings
Attackers are advertising fake applications and websites to get malware onto people’s computers.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
What you need to know
New malware attacks mimicking the Microsoft Store, Spotify’s website, and a PDF converter tool have recently been flagged online.ESET research recently sharedimages of the fake pages on Twitter.Bleeping Computerspoke with ESET’s head of threat detection labs to gain more insight on the attacks. The attacks work by using fake advertising to highlight pages containing malicious software disguised as genuine applications.
One example is the fake Microsoft Store app listing shown below. The listing claims to be for an online chess app. According to BleepingComputer, if you try to download it, you’ll instead get a zip file named ‘xChess_v.709.zip." The file is actually a piece of information-stealing malware known as “Ficker” or “FickerStealer.” The same strategy is used with a fake Spotify page as well as a fake PDF converter page.
According to ESET research, the attacks are targeting countries in South America.
With the malware utilized in these attacks, threat actors can steal credentials saved within web browsers, messaging clients, and FTP clients. The malware can also steal over 15 cryptocurrency wallets, steal documents, and take screenshots of which apps are active on someone’s PC. This valuable information is then sent back to the attacker.
When browsing the web, you should always double-check the URL of any sites you download applications from. If your PC has been attacked, you should scan for malware and change your passwords. You may also want to pick up thebest antivirus softwareto help secure your PC.
Get the Windows Central Newsletter
All the latest news, reviews, and guides for Windows and Xbox diehards.
Sean Endicott is a tech journalist at Windows Central, specializing in Windows, Microsoft software, AI, and PCs. He’s covered major launches, from Windows 10 and 11 to the rise of AI tools like ChatGPT. Sean’s journey began with the Lumia 740, leading to strong ties with app developers. Outside writing, he coaches American football, utilizing Microsoft services to manage his team. He studied broadcast journalism at Nottingham Trent University and is active on X @SeanEndicott_ and Threads @sean_endicott_.
