Researchers of the company Trend Micro talked about a new spam campaign to distribute cross-platform malware Adwind. The program is a Java Trojan for remote access (RAT). The malware is in development since 2013 and recently again reminded of itself. This time, Adwind attacks aerospace companies primarily in Switzerland, Austria, Ukraine and the United States.
Other trojan names are AlienSpy, Frutas, Unrecom, Sockrat, JSocket and jRa in.
Adwind attacks devices running Windows, Mac, Linux distributions and mobile Android OS. A malicious user is able to steal credentials, record keystrokes on the keyboard, take screenshots, and collect data. In addition, the Trojan can make the infected system part of the botnet for DDoS attacks.
Researchers Trend Micro recorded a surge in the number of attacks using Adwind in June this year - 117,649 infections (107% more than in May). In particular, two separate campaigns were recorded on June 7 and 14.