The National Computer Emergency Response Team (NCERT) has issued a warning about a new cyber threat: malware disguised as PDF editor. The malicious software, identified as “TamperChef,” has been spreading online since August 21. It targets users through fake emails, fraudulent software bundles, and misleading advertisements.
NCERT revealed that the malware disguised as PDF editor can steal sensitive personal information. Once installed, it grants hackers access to system files, browser cookies, login credentials, and other data. Experts also warned that it could connect to command and control servers, potentially compromising entire networks. In some cases, the malware disguised as PDF editor may also install ransomware or spyware.
A high-level NCERT meeting resulted in the issuance of a formal security advisory for both government and private institutions. The advisory emphasizes that the malware exploits a JavaScript-based remote update mechanism, making it harder for users to detect its malicious activity.
To counter the threat, NCERT recommends several precautionary measures. These include blocking affected IPs and URLs at firewalls and intrusion detection systems, restricting program execution from temporary folders using AppLocker or Group Policies, and installing updates for all operating systems and libraries. Multi-Factor Authentication (MFA) should also be implemented wherever possible.
Additionally, NCERT advised institutions to conduct regular phishing awareness campaigns and ensure antivirus and endpoint security software are up to date. These steps are crucial to mitigate the risk posed by malware disguised as PDF editor and other similar cyber threats.
The advisory concludes by urging individuals and organizations to remain vigilant. Users are warned to avoid downloading software from unverified sources, double-check links in emails, and report suspicious activity immediately. Cybersecurity experts stress that the malware disguised as PDF editor represents a growing trend in cyberattacks, highlighting the importance of proactive digital safety measures.
Failing to take preventive action could result in serious data breaches, financial loss, and long-term compromise of sensitive information. NCERT’s warning serves as a timely reminder of the importance of cybersecurity awareness in the digital age.
In other news read more about: Government Warns About IPhone User Hacking in Pakistan
