New malware uses password recovery and backup tools to steal data

"A new type of attacks targeting government agencies uses readily available software such as password recovery and backup tools to infect victim organizations and steal sensitive information, said antimalware researchers from digital security company Bitdefender.

Netrepser, which according to Bitdefender Labs has been active since last year, instructs legitimate applications to take malicious action. Because it relies on apps known to be benign, most antimalware solutions are unable to detect it, Bitdefender's team said.

The researchers added that Bitdefender users shouldn't worry, as the company's behavior-based detection technologies easily identify Netrepser's actions as malicious and are able to block the attacks.

You can learn more about how Netrepser works by downloading the full technical analysis available on the Bitdefender Labs website. "

https://labs.bitdefender.com/2017/0...M&rp_mid=EMM_ENG_NON_Password&rp_rid=36128048